Extracting prog: 2h43m44.605022627s Minimizing prog: 21m0.277554061s Simplifying prog options: 0s Extracting C: 40.658182295s Simplifying C: 10m52.48163167s extracting reproducer from 37 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_mptcp-socket$nl_generic-socket$inet_mptcp-socket$nl_generic-socket$nl_generic-socket$kcm-socket-socketpair$unix-socket$nl_route-sendmsg$nl_route detailed listing: executing program 0: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program did not crash single: failed to extract reproducer bisect: bisecting 37 programs with base timeout 30s testing program (duration=39s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 40, 2, 30, 3, 14, 14, 7, 2, 30, 5, 2, 10, 27, 30, 5, 28, 30, 2, 30, 14, 18, 2, 21, 4, 3, 3, 2, 2, 24, 6, 30, 3, 4, 18, 30, 10] detailed listing: executing program 0: syz_emit_ethernet(0x8e, &(0x7f00000069c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6a7abd6a00582f01fc000000000000000000000000000005ff0200000000000000000000000000015a0a"], 0x0) executing program 0: socket(0x15, 0x5, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) (async) r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) (async) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000380)='k', 0x1, 0xc) (async) pwrite64(r2, &(0x7f0000000380)='k', 0x1, 0xc) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004641004000640000ff069078ac1414bbac84a707ab39f946dee66ed5752a1414bb940400000000000000000000000000000000000400004e2100004e21000000"], 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004641004000640000ff069078ac1414bbac84a707ab39f946dee66ed5752a1414bb940400000000000000000000000000000000000400004e2100004e21000000"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0x9ffc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = timerfd_create(0x1, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) (async) timerfd_settime(r4, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000900)=ANY=[@ANYBLOB="12015002000000102505a8a440000102030109021b00010107a00909040007020701020009050102200002050d52643b9ebbc954ee97b89857f96ddd49b3155268581ce2084f6a32dd9ab372039c6bd6a9194c3beaffd00d14e08b13305feb32c6c306cf3804e90282f072274b593ed003823f8cf2715c2ef0f0657e812f3f39ddc1f63dc22dde7f61f8b89db8f4a78526095422633b050ce080f7509d2723fba679209cd09d1b3dd466c52981f9074b0f089f72725174089c7cd1a92d134d54af4ed6627f8bde804b6c5c3116c927b52ed06c4c2ea6855e83d2a15f5de6898fc81f88012c760875ca4a00"/249], 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0xd) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) sendfile(r5, r6, 0x0, 0x1000000201002) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f00000000c0)=0xf73f) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000240)=""/78, 0x0}) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000900020073797a3000002000050001000600000005000500000000000500040000000000140007800800114000000000050015000c8537350d000300686173683a6d6163"], 0x5c}}, 0x4000) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x1c}}, 0x80) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x20000000) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000780)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x8, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0x4, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0xd, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x8, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x6, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8cd, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000000)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x24008800}, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) set_mempolicy(0x5, &(0x7f0000000d00)=0x4000000ff9, 0xf) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000d40)="170000000200020000ffbe8c5ee17688a2003c000303000afdff0230040000d90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff0100000001000000", 0xc0) (async) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140000001000010000002471c0d0e0e1486a33aa98ff7d929f0000000008000500000a2c0000000c0a010100000000000000008a0000060900000073797a31000000000900012f166c77b9827f0073797a3100000000140000001100012091c1b900000000000100000ac0af268c9f3292829b"], 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000001140)='./cgroup.cpu/test\x00', 0x777) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r6, &(0x7f00000011c0)='10000', 0x5) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x1b3) (async) r8 = openat$vcs(0xffffffffffffff9c, 0x0, 0x880, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r8, 0x29, 0x41, &(0x7f0000001240)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000000010000093619fdbf7003d4d90559dc7fa8a74d1742118aab32cee6ad64736f8ba5a67a52184f3ca2908a1ab5e87ae0397b95477518b03083123d07c6c763d4b9012ee965c592dd43d0f852e70e525c1c90d842d0a1dc27a335f7ea9448a38cac58337dcbb5cee5169a581252672c9e36300e68552931d9a10c24dc86077bceec5f0598812bfb05bc95477c6326cc2c30b01cf40a0a795e52bf10a8d68935fe4ca5a913206b07ad382ccc519c0ecfb20a3c38946e43a30c54f81e0fd3b87877bd081b62526eaf4941011cc09b8d05ba2a930a5ffc5b2f363bebc6f2c359bccf9c5453b34313f68a69ce774268f813aaff1b145d0c97ff4f6f45764a45362ddb8bdde39bf3f8858e86881bf4381f5b73e3314c0f66693ca95ebf1c4427385dd6758cb84716c7c3186175275dd1c75dd810b3c2383ca2fd19e100957bb7729623cfd1c227ea56eec9504f05606ae1ab681a3ea723c56729c0fa555fb21724c1efab8db9562bcf68f2208aecb4d3dbe1e16dbaeca720e73245ef0a12895bb288a0b1b50f4d6c626fe312123fa75a4fe30cae8c2b3a8fe20f2108f3486c219fb60180725e0c1c240d635ba2f9c6dab7b55a48b4f620106e15dad9bdf011379e10619c4d29cb5cc0d77b336f6b50f13fdf16b7301cd0c4380db3bb20fba195159ae9e57c19e7b1a4b84b30b25aaafede5c1d998f8d8bdcf256c811206466bfeb86d13bec8869d1c4888c51b940615e21194012a7eae19a088f28b9301813dd6218fbeb5a93af00cd20a83186bb93d2edd02a5f259c3ae9db3a1f05baae0fa417fae0ad5132468166589d4f281dee2299dbac9e4f2b470562e0afef6a1e00781ef0340befac3059ef64e9310e2a38b770f1418852cac0983d4a0424ff618a19473b6d8714253ebf7023d4e67924d871d6a2c22c570c74561c92e2f54f2a066ebe249c0ddd6590f022bf52f201562f6a73fbd2a268c52eade84bb0a9539d9e0f7e4451b27c32c1e5df533c6521c04278543c5691aaa57ee49eaa8887683be1587d0ebb75bcc89dfcbf3dba48f29d5ec86131db9a027023f22b030afa416b313434dca8c332a2adf6e4af8ef4dd81f0657f9d811d7470f6ad84d0dd846fc92429d698c6583e0a3d404951c039c5f0b3a0d32c438ef5aa8ffa2ff35c9408798efd9fbd6c8eb2d8ef4ee06593dd8cfd0707b7c2fa0bc1be3ede80a5b7e2c56253244065578a71eb2f4f9af177280b5e562fd382e37557ff02999688c3a84d424161155776ce40a9e1986b55bb894c5d3351772f4c21494c61e1bc8a14d57be4dc4b180a6293ee8ef6cb44d5e3320aaf94e81a163edaa4f13af819e3b9a851b37d543c63a7505bbee0fe06ea7c3b86087179e15fb20c9f1353b91825423687bb2c050104fe1ba0e801e15471bc9ac70f86314b79ad4790e758800be046bd916ebeee7e72c25df80e9c480f9e5ebdf41835e8e99f155db962b31c1cbf894ce4eeb99e85e129ce373fddc78500143cefb0ba6408fd4006750ede654dfd0ce1256785c93bcd01cfa8dd6c34b26b340eeea3786d49bd46fc0c3eb5e1a5b876c441e3bce28e990ed6942b9003571cf7713336c0743d9087ff65538537cec3aaa7301f3bb838df6e3e08f6ffdfba3eca4a53d1253f414fa69c6a7b83ccd27a6b66275bf15b4c67dcad538fcdc83a49c93cf36a077626c498b1cf258469abe4c55d400b27a3e85e222e76d55b1a5cf314b7c28a7aee557debfa2b2c572e381b0f7b9d1021c8a55ee6c631ddd2c3dced0bbb6b503cf2b7c3214528154e2e7437670bc4cd7e4455d7778abd21e77b4f6ed24803c0c932ea41152b2316ac8493b037a24b9217b43d3b4191808b48927f4924bb1d37670dcaec72d463b6246c620d877c78d1193762c4630cdf030b8da308460f7e843ff6fb1757043fdcdf8737bd65856a1fd7bd39e270899eba359a8134ad444632592c801fa673578ad914e43491673a6750971d03f8b60992a3ce899efd7097f3b00ed48c6e53e898f12fd316c2c2c3e2ceb4ecadde596559ca74226657e8632e63a92e3663ae5b926e5e7df22c9e9f468e57db8e4f1aacee652f5b230cd0bb962b0b26cbc38a1d897ee1a3209b520a13fb9035cc4c3c941cc4b283f3945bc8d06198e7f170300293cf8f5de1c277a047ab450d1a670fd41ee082f4676961ab59b5886a94b22c7be829f15ef907240b7114f59681a160ea0414b36f1ffbcdbabd0c0913ef47d0a4d43460b7b18fac66394c6802c8f823bc759778de2ea84e7c0f0254b1100c03f42793177df9c5d76e3d62ae69cd654f12cc24df25967b699da008b14c5f3039fc51d6425a1a819232ffd0ef0da9ddedb325425e14f8618127f4cb59846d0a6db4d807f1cb967022e82dbcfbcbd64c073144cda39b0725b1663c40086233a9ea982b3b702c993a99dc1000f2422d1d07c9eb95b56b75735fc55fcabbf8538da47e222633e2f5ca4cefe74e63da9509cc711d6929206d6aff332f433cefdc68b6b817d9973cef59bbb7ba3bbe00c49ed3cfd06bf9c9271eb5e1b7bdc21995dc363558788c67b9b4a96cd30d9dd69cc32901d70286f473b0d9be865f7a63827bdc9d41325cde6e8b98edec75b167faa579be77a8115db37ceb0ca33bf43b340e1038fa941bb0352a6d1bfa43683c389ab935db92d2764041c99837604cff8ee88865cf40c88f5d48c6fbb55435fc8de0c0c544e4459b8ec59ed9aa0d9bcb807e4193e781a46b9c74ea62313c2e1df769d970c065ab0a01a5fea71814b81322ea8be400dc0560f08c8fc14de989fae2cd4894ddb5cca4c9ed70dc354c8101e8a07482a30089fa0cdcadb715f6e7cfe109874721f0bfc2e0766230aff622e038e8e"], &(0x7f0000001a80)=0x1024) write(r7, &(0x7f0000001ac0)='1', 0x1) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r9, 0xc058565d, 0x0) (async) openat(r8, &(0x7f0000001b40)='./cgroup.cpu/test/cgroup.procs\x00', 0x480000, 0x181) executing program 0: set_mempolicy(0x3, &(0x7f0000000a40)=0xef, 0xd) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000ac0)=@filter={'filter\x00', 0xc, 0xff03, 0x260, 0xffffffff, 0x130, 0x130, 0x98, 0x98, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0x98, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010100, @multicast1, 0xffffffff, 0xff, 'ipvlan1\x00', 'sit0\x00', {}, {}, 0x62, 0x1c6a0dc5b9630812, 0x30}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x300000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'macsec0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000001c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x3, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x802d, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x0, 0x3, 0xff, 0x100}, "b68ed34f131c03e57e518e4d"}}}}, 0xfdef) unshare(0x20040400) unshare(0x10040400) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setns(r2, 0x20000000) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0xf80) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, 0x0) executing program 32: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000001c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x3, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x802d, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x0, 0x3, 0xff, 0x100}, "b68ed34f131c03e57e518e4d"}}}}, 0xfdef) unshare(0x20040400) unshare(0x10040400) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setns(r2, 0x20000000) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0xf80) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, 0x0) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x9, 0xfffffffb, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x0, 0x3}) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') read$FUSE(r2, &(0x7f0000001380)={0x2020}, 0x2020) r3 = openat$apparmor_thread_current(0xffffff9c, &(0x7f00000033c0), 0x2, 0x0) write$apparmor_current(r3, &(0x7f0000003400)=ANY=[@ANYBLOB='permprofile && \r:'], 0xff) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x11cc, 0x42, 0xa09, 0x2, 0x0, {0x4, 0x1}, [@nested={0x4, 0x102}, @typed={0x8, 0x1a, 0x0, 0x0, @uid=r1}, @nested={0xc, 0x8002, 0x0, 0x1, [@typed={0x8, 0xaa, 0x0, 0x0, @uid}]}, @nested={0x119f, 0xcb, 0x0, 0x1, [@typed={0x8, 0x58, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x4, 0xf6}, @generic="d0eb1c16f0607352d9628070370089", @generic="8c2c497642be41684d1fb75209aadc1a31f3a628e117a46100c7a35dcc0c8776d299df8f29d5b72e8b6bc04890ccbc0253c3cdd5a5da3854aaf46aaac52d8718633e6035663bf87e8eab2c5c61da7f21b8261bec5c4c33d87ccea913df42fed3f079697f8c32e9868e8a8b47e2317499488c9a291b28069987311893da4dc044ff516ca2595a4d4e13829a3be0499b81fe6bcde0d5c4cd0da1ee2edd162ca67e3e98a01c4597ebf6e31c76cf967f0ec91ef5558b4fb1de8f8cc8bd1ea48c7f7e90cbcf13cbf9f131", @generic="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", @typed={0xb5, 0x9a, 0x0, 0x0, @binary="8ebf8cfd83f9bcda7575193db6b65c017a9c656066ea3cca7418b32aaa108e6b26cda94166b23e7bf1a70aaa62b8d96e971089a8cea9a47018569be65fe38f56b3319139a05a06716305d72a7e44be9580eb35a0269933e9a25494c3a22f4c3cdfd14cb3efc3d1673913627997384a8b9b37b5eeace9c2bde397338ce2913fa911ecff5cbfd50f6130a5cc1c571704999b3445c121eaffd9915dedfaef55f99cdc4400799f1143fe5e2cbd6f5cb304a315"}]}]}, 0x11cc}, 0x1, 0x0, 0x0, 0x24048000}, 0x0) executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@private=0xa010100, 0x4e22, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x3000000}, {0x2, 0x9, 0x80}}, [@tmpl={0x84, 0x5, [{{@in6=@private0, 0x0, 0x3c}, 0x0, @in=@remote, 0x34ff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6e}, {{@in=@multicast1, 0x4d4, 0x32}, 0x0, @in=@local, 0x5, 0x4, 0x1, 0x7, 0x0, 0x0, 0x400}]}]}, 0x13c}}, 0x80c4) executing program 4: ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) connect$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x48, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x14) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x80010, r2, 0xa94000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0x80000001, 0xffffffff}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000340)={0x0, 0xa6, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r9, 0x1, 0x70bd2a, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x4080) r10 = syz_open_pts(r3, 0x721100) r11 = syz_open_dev$video(&(0x7f0000000000), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f0000000440)={0x9, @pix={0x2, 0x0, 0x42474752, 0x0, 0x0, 0x1, 0x3, 0xfeedcafe, 0x0, 0x0, 0x1, 0x5}}) dup3(r10, r3, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4088040) executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000000301010100000000000000000a0000000c001980080002000d0800003c0002802c000180140003"], 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x402, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000140)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002580)={0x38, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x12, 0x1, 0x0, 0x0, @binary="0011e30fe3509ec9d37d66340683"}, @nested={0x4, 0x8002}, @nested={0x8, 0x8003, 0x0, 0x1, [@nested={0x4, 0x19}]}]}, 0x38}}, 0x0) executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000340)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000f80)={0x0, 0x1c, &(0x7f0000000fc0)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f0000001000)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000001040)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(r1, 0x84, 0x7d, &(0x7f00000010c0)={r3, 0x3}, 0x8) executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newtfilter={0x490, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x460, 0x2, [@TCA_ROUTE4_POLICE={0x454, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x8, 0xb, 0x200, 0x3, 0x8, 0x665, 0x4, 0x5, 0x34, 0x6, 0xa233, 0x62, 0xad, 0x3, 0x80000001, 0x5, 0x2, 0x6, 0xd906, 0x0, 0x8, 0x80000000, 0x1c7, 0x9, 0x7, 0xf, 0x7fffffff, 0x0, 0x515a, 0xa4, 0x2, 0x8, 0x8, 0x0, 0x100, 0x6, 0x78, 0x8000, 0x5, 0x5, 0x9, 0x2, 0x7, 0xa0, 0x4, 0x5, 0x8, 0x2, 0x7, 0x1000, 0xfff, 0x141, 0x9f, 0x1, 0x37ac, 0x3, 0x2, 0x5, 0x401, 0xe386, 0x0, 0x0, 0x3ff, 0xfffffffe, 0x5, 0x2, 0x6, 0x9, 0x80, 0x60, 0x6ffd, 0x2, 0x5d33759a, 0x7, 0x2, 0x4, 0x7, 0x3, 0x3, 0xdcb, 0x401, 0x5, 0x3, 0xe, 0xfffffff8, 0x5, 0x9, 0x7f, 0x4, 0xd, 0x6, 0x0, 0x1, 0x3, 0x7000, 0x4, 0x7, 0x1, 0x9, 0x2, 0xc6e0340, 0x4, 0x401, 0x15, 0x101, 0x4, 0x7, 0x3ff, 0x398e, 0x2, 0x10, 0x7, 0x0, 0xc, 0x1588cdd2, 0x11be, 0xffff, 0x2ac, 0x5, 0x3, 0x3, 0xfd, 0x4, 0x4, 0x9, 0x0, 0x8, 0x6, 0x6, 0x9, 0x3553, 0x5, 0x9, 0x6, 0x8001, 0x1, 0xffff, 0x6, 0x0, 0x5, 0x40000000, 0x6, 0x4, 0x0, 0x5, 0x7, 0xe, 0x5cb7, 0x5, 0x11561d4e, 0x5, 0x5, 0xffffff80, 0x4, 0x2, 0x5, 0x3, 0xffffffff, 0x101, 0xef, 0x6, 0xa, 0x6d37, 0x7fffffff, 0x8000, 0x7fffffff, 0x80000001, 0xaba5, 0x1, 0x7, 0x5, 0xa3e0, 0x5f, 0x3, 0x9, 0x80000000, 0x1, 0x81, 0x9, 0x800, 0x0, 0x2ced, 0x10, 0x8001, 0x5, 0x7, 0x100, 0x1, 0x4, 0xe, 0xfffffff9, 0xffffffff, 0x2, 0x4, 0xb4, 0x9, 0x0, 0xdf3c, 0x4, 0x6, 0x4905, 0x3, 0x3ff, 0x3, 0xcace, 0x200, 0xc5c, 0xfffffff8, 0x9, 0x3, 0x3ff, 0x0, 0x100, 0x3, 0xb, 0x4b73, 0xfffffff9, 0xffff, 0x55d, 0xff, 0xc, 0xffffdfff, 0x4, 0xfffffff8, 0x4, 0x1, 0x4, 0xa, 0x55d0, 0x8, 0x2, 0x0, 0x307, 0x7fffffff, 0x3, 0x5c18, 0x2, 0x8, 0x2, 0xb, 0x5, 0x100, 0x6, 0xc, 0x8, 0x1000, 0x3, 0x2, 0x0, 0x800, 0x4, 0xa, 0xfff, 0x8000, 0x381]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0xad}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa2e}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x2}]}}]}, 0x490}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x400) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0xe) r1 = open(&(0x7f00000005c0)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f0000000600)={0x1, 0x3, 0x2, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x200) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000740)={0x1, &(0x7f0000000780)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x6c28c0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x7b) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000bcb2a43c9bf84dade0acb18e63bc7c6763cf785ca6e2c1ba2d70d7c9ffb664cb94e71b2f59e046afcade085c5652a58fbfb7895820cccf156bfdb1bb515cb73b777ad9dc2f1e2f6cdd50a9e2571794d7a056b7f771", @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0xd, &(0x7f0000000980)=ANY=[], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r4, 0x0, 0xe, 0xe, &(0x7f0000000a80)='\x00'/14, &(0x7f0000000ac0)=""/14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={0x0}}, 0x8040) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000b80)={'bridge0\x00'}) syz_mount_image$fuse(0x0, &(0x7f0000000bc0)='./file0/file0\x00', 0x18001, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) syz_open_dev$usbmon(&(0x7f0000000d00), 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000d40)={0x3, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="0203000210000000fbff0000000000000200080008000000660000000000000005000600000000000a000000000000000000000000000000000000000000000101000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8000000000000000000000000000aa0000000000000000"], 0x80}, 0x1, 0x7}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000e40)={0x2020}, 0x2020) executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000002, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7e, &(0x7f0000000100)={0x0, 0x8690, 0x40, 0x6, 0x20002f6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x50) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000200)=0xf3b, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000004c0)=0x2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) getsockopt$inet_sctp_SCTP_ASCONF_SUPPORTED(r4, 0x84, 0x80, &(0x7f0000001c80)={0x2}, &(0x7f0000001cc0)=0x8) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000500)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000001d00)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) bind$tipc(r6, &(0x7f0000001d40)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000001d80)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000001dc0)={0x42, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r5, &(0x7f0000000a00)='q', 0x5e0, 0x881, &(0x7f0000000a40)={0x11, 0x8100, r7, 0x1, 0x87, 0x6, @broadcast}, 0x14) io_uring_enter(r1, 0x6c7e, 0xa5a, 0x16, 0x0, 0xfffffffffffffda3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_emit_ethernet(0x35, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180c20000000200000000010027424203"], 0x0) syz_emit_ethernet(0x35, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c2000000020000000001602742420300"], 0x0) executing program 5: r0 = memfd_create(&(0x7f0000000540)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000580)="4fbbd1479f07edd315133cfaee3b43c23a0dd466b5222ff79d8f", 0x1a) sendfile(r0, r0, &(0x7f00000005c0), 0xffff) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = open_tree(0xffffffffffffffff, 0x0, 0x900) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r3, 0x0, 0x0, 0x4}, 0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x1000, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x80, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) truncate(&(0x7f00000007c0)='./file0\x00', 0x100000005) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x94) write$dsp(r2, &(0x7f0000000080)='\\', 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000840)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newlink={0x44, 0x10, 0x401, 0xfffffffa, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1705, 0x204ee9f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000980)={r7, @broadcast, @local}, 0xc) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000180)=0x2) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f00000002c0)={0xa3, 0xd, 0x4, 0xfe, 0xe0, 0xfeff, 0x0}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, &(0x7f0000000200)={0x1, 0x3, 0xffff5f11, 0xfffd, 0x6b78, 0xc, 0x40ff, 0x1fa, 0x4a, 0x28, 0xfffffff9, 0x2}) close_range(r1, 0xffffffffffffffff, 0x0) r10 = open_tree(r3, &(0x7f0000000480)='./file0\x00', 0x100) ioctl$XFS_IOC_COMMIT_RANGE(r2, 0x40585883, &(0x7f00000004c0)={r10, 0x0, 0xef8, 0x7, 0xe0, 0x4, [0x3, 0x15363e5b, 0x3, 0x401, 0x8f0, 0x4]}) executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) (async) r0 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000001500)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0x7f, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000001780)={0x0, "7f7acb036ad32033e27c8a2de7608e32d0a00f79d7103e9558e81ef72464f27ceb521b96ede4b47bbcf13ea0ae57ec7becb27b8c429108adc2ae6ff315b1be23", {0x572, 0x6}}) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000001980)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0xc182, 0x8001, 0x8, 0x5, 0xfffffffffffffffe, 0xfffffff9}) (async, rerun: 64) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) (async, rerun: 32) sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x7) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) (async, rerun: 64) recvmmsg(r2, &(0x7f0000002a00)=[{{&(0x7f0000000140)=@nl, 0x80, &(0x7f0000000bc0), 0x0, &(0x7f0000000c00)}, 0x3}, {{&(0x7f0000000c40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000000)=""/68, 0x44}, 0x3}, {{&(0x7f0000000e80)=@l2, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000001140)=""/253, 0xfd}, 0x40}, {{&(0x7f0000001240)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f00000012c0)=""/44, 0x2c}, {&(0x7f0000001300)=""/81, 0x51}], 0x2}, 0x1ff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/106, 0x6a}}, {{&(0x7f0000001900)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000080)}, 0xe865}], 0x6, 0x40012002, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0xffffffffffffff50, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20008040) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xe0d9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) r4 = syz_open_dev$usbfs(&(0x7f00000005c0), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000001840)) (async) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000001880)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f00000018c0)=0x1) (async, rerun: 32) syz_emit_ethernet(0x5f, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428e916293afffe880000000000000000000000008001ff0200000000000000000000000000018900907800000000fe8800000000000000000000000000011f02d462daf76d13b82ce3b95fcce69e43"], 0x0) (rerun: 32) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x18) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x2, 0x40, 0xfffffff7, 0x9, 0x0, [{0x0, 0x3, 0x7, '\x00', 0x2}, {0xb7, 0x9, 0x5, '\x00', 0x9}, {0x2c, 0x0, 0x0, '\x00', 0x8}, {0x3, 0x5, 0xff, '\x00', 0x5}, {0x6c, 0x6, 0xc, '\x00', 0x3}, {0x5, 0x3, 0x1, '\x00', 0x1}, {0x88, 0x8, 0x1d, '\x00', 0x8}, {0x1, 0x70, 0xb, '\x00', 0xa2}, {0x2, 0x6, 0x0, '\x00', 0x3}, {0x4, 0xd, 0x88, '\x00', 0x79}, {0xc, 0xd5, 0x3, '\x00', 0x1}, {0x2, 0x0, 0x1, '\x00', 0x7}, {0x80, 0x1, 0x9, '\x00', 0x1}, {0x81, 0x3, 0x8, '\x00', 0x2}, {0x3, 0xf7, 0x5, '\x00', 0xb}, {0xe, 0x2, 0x80, '\x00', 0x3}, {0x5, 0xd3, 0x15, '\x00', 0xa}, {0xff, 0x7f, 0x2c, '\x00', 0xa}, {0x2, 0x6, 0x1, '\x00', 0xe}, {0x9, 0x10, 0xce, '\x00', 0x5}, {0x8, 0xfc, 0x5, '\x00', 0x8}, {0x2, 0x14, 0xe, '\x00', 0xa}, {0xb, 0x1, 0x10, '\x00', 0x1}, {0x1, 0x3, 0x4, '\x00', 0xd}]}}) executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000e40)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000001100007802"], &(0x7f0000000e80)=0x2a0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x1) fsmount(r1, 0x0, 0xa) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'lo\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000300)=0x0) r8 = eventfd2(0x3, 0x80000) io_pgetevents(r7, 0x2, 0x0, &(0x7f0000000340), 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000380)=[&(0x7f0000000680)={0x1802, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, r8}]) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_destroy(r7) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x2, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xfff2}, {0x2}}}, 0x24}}, 0x0) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r2, &(0x7f0000000140)={0x6000000d}) sched_setscheduler(0x0, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0x0, &(0x7f00000003c0)={0x8, 0x110008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) unshare(0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) socket$unix(0x1, 0x1, 0x0) executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000540)=0x11) readv(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/180, 0xb4}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utimes(&(0x7f00000004c0)='./file0\x00', 0x0) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000080)) r3 = open(&(0x7f0000000040)='.\x00', 0x80080, 0x20) linkat(r3, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) openat$cgroup_int(r3, &(0x7f00000003c0)='cgroup.clone_children\x00', 0x2, 0x0) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010028a6704cdbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008000d000100000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000302040008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = accept4$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10, 0x80800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) r5 = fanotify_init(0x2, 0x101000) pipe(&(0x7f0000000140)={0xffffffffffffffff}) fanotify_mark(r5, 0x1, 0x4800001e, r6, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000002680)={0x50, 0x0, r8, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x5}}, 0x50) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0xc0202, 0x0) writev(r11, &(0x7f0000000380)=[{&(0x7f00000003c0)="e406247cce54f1bf1e68fde89a67b3dfea3060f92bb7f4243fda118f4f153550b02022b6f8d5148b465b98fd98f7bd9cc44c9631e975f0552476c44f6c2e85c70acfd0ee1d4a2486d002534cf671599667b69c27d027198b6e4369905809d7df3c37513302ccaf882c23b2ddc05506f68d138c17c039f397c4d0c911c794cb1e7edb8e9d822f3409078cad3ec5f1b3c04ea91cf1371d13496bf89170b951b39ee0a60c91a0c9e339165c209da032c42733c037e500a37c14c9c092ff95988e88d79fd27a90968b436dd98f842300c363878a55b86f0caf802c06ca3c69bcbfff80c9492d264c4e90c0758cbbf313c3824b97af8a787ac54aea77f1128e2b65c13cb6d8f465f2da8d1b6b5c871a14647244e3f4f44241a02e49ae978c1a5a8a78bd727455136f9524d086ee15d3d5b29ca5d2b112136fa5663c0fcdec7e491d0eae70dad83bb95100e05619fdce4b689cd98a13c281f0c0f0358631f3789f982e9ead2881377b706a198a85c65a0b4473e96adc7b8d247df03db08ee9c3eb966db91b1248174389ad7591c00e8862c604b99c69d6e8410d26fb467056d64794c9feec3b8a90180d57922dd4684d6b39b454aba577ec24da7a957366803fc8083573e7aed698172719a4968fa8e9e23ec939ba27eaeabb3bb2d1e0112f4e3b2ef9d68d808dcb1f4c6cb60aa659f26e8e1682ad13d85a3a3147415a18c1bb746bbf", 0x200}, {0x0, 0x20000}], 0x2) syz_fuse_handle_req(r7, &(0x7f0000002700)="cab1f92d585917232bcfa47f91900c936355a83b5a41f6f43bd8b0d1a1e13674b6a8596a8376e6851e0b96decd071d92ce4887ddad2b82183858d82c7d11948024607d92ec0f1c23a4e755f29fa557d1353a3ced680f530e822eed64b4d1aaf20d1320f3583cadb9dfde95993487f96bc290dc10cfccc5ec8ea864590fc1678b79b0a36c9668b27ae142d22c305496881af0d0546076ec21e31bdab2465010e779e7140036d2b12f59b971792cfed8d07f0b8ae13ee944268f573ec11c1b14d53880a64fd2fdbe981f4d9af8863191efc03a39d5a3f19badf65dd49443297b38bf0c009eafad5879cb78e63b00e961de7d7180941f0d1e87a2635294bcb4619e9d84be1816784325d23fcb9c66388b586c8e719f3edfa2aa37cc3f6511add854c10fe546d1c11f11eeaff24cecc0d47ec8fd336ec08470f06227e4a9410074a3d715eb6a697b04bdfeda0b6753d880d012ef8fada7f4ed649ca214609e31cace9a33937813012e4c1b787d8f71ce9b495a69e5c8810ff9954b7b96743dcdd7e52ebbf526f339d3c8ad2550326d3a396de5ac90787b352feabe013c4044ca813344c97f836851d6daf2de3a8b07a61d1052bd302a641706af7629a042dc2f0374671b287f1325763e1818beba9f7cab9e25d6f8749f7dea4c5ef684723d33938aca32e19b1c6a6237d899fb397e9023764b3f4d6399885533a802e4d3ca76f2e0234ed6d7257f8cebddc900af88cc21ee2816513045e92f71fc8523894d684678f17b5fdb4adeda98fc019c0ba05efeffeff3bbda1d6d84a98002a74237cb8d13cb30d8a9a7e47e4da8273a47df4e6ea53036b5b154b9597e6eb00fcad29ed04a820b1ce807bf1818344122a6f0aac52d24426feeba0af56925cb4a1e70a84251f2b4d4693e689518a0e159647b5b60a62db699a25275520c208652ce4401bb5dcd633e7c889758d3d213f4dbe69c9bb76e80b6e892bb5f5809e042ee5cb1982a2373b1886711d1e68d0bc3d4c9d69ac605432bf84cd81104e77c71cd7c0708244fc9428edd52f8cc8f3023b4c6d3bbad7a9b874111098c4652b34c428a8f789c5e5f3f84354ab7afec1a7b11d2a34771ebad2f15c169a61b431c8a1cca9ca1596fce65242d03814ebf977da9bbde5707b22b5002cce68bd0f6d196df341c96bd0cf0916b8775e75021663ea82c99a90b844cc5f8b6c56b21b1fbbbf6fb40ed0c29ee4ecc2998df2cbe3a4d75025ef73dd9f3aa5bc7aa694fe573a73453c9ff873d0a8840afd91be319181836de45260b4e252394edae58f840858a9b64f0ff37bb1820031e563250e62ceea5a7c4d2cd4d5d10e57176fcf576e774920db06b36ea02f9cae9c1087bd1866fb4bcf7fbf393093b339860a61c61248000a2a1bbc982fa691e311fa1bf2a38afdf08b574eed0df42bdc30c3db7cdcb71687f48070077f91fef93e8e47e248d3e53e8a79fcb5a8f8aa39b3bfa2dd88d5c5840d517ae8c132d423a37a8be3301d62a99753bc72f674205a11850e045430abbdc4e68223a93c76d6d2f1d646af10a15705793e2fc5a532af3dda88f52063a091f1f79cd5a5b23ea7742b149eab1aa43c21c2f15227a1f94b5580adbb1e1c49ade49d6e8b838cff43aa2426651817f479252c8ef7af9e4a5ad33839be6c15b50016c59f13c26cfca796cfc01207acc69e9d3952f6e71c975bc77d5a001f6f6c044770f54d86a4518a4898e3136988d643dd2de907859f0b4d4de2a2d461ba5e05cff49eda86772799b2e7947fdbb89fc5b0347e87f1b9dbb94842cc1457d07f3e0c41342510f5ccb551cdf0fcac1a758041bff75812de1b2abf341ed5f667c9b0581d2c33e0b17f1b46c2287399c62252edb9c1cf2b80b7a1b4c3c903aa4cf5332a2998b9072f61f589ae5df1168f8d18e98fce2bec1d5d876f9757017b73495a4e8f4f2423cde8875aa8c95a9ce180cac6690657b8a70e5541d5ef46575cd74e063759fe4889f4d9737a6c9732f8b7f7836508814093b9bdac5733938e761b3642910d4df0b646c1b9583a502246988e9ab78de3d011e8590e48eadfcdb70c8aad6dfbe1dbd3ef20d9ba393db4e6cf91e3bb4e84883c60dc20ed974a5decde12d3c5a1c9a00999f8eefc244465f518425820b9713cbfc6027f427b9cd8756edec5b3a0301a01ebb12c6d412ee3422aeb8b291619f62f4ce41511156f73e54b5097051ea777af7cb73b36e1274ce1a3892007466cc793eb0515b8984acb99c04c7eaa51e175bd73d99bc0c67c8ea84d808a7906a6ad330ba2c9651b2ab82d0781a969873dcddb068c15b7899fd560a1c3d44b34e81cce079c46fd86522052659e2c3151c79a8ccab1dfcdb91f53ca067ea1b2aa507278e4166e817eb0d7dea67cde1598a1bdb76a8caf82add2b43fdd10bf80b0d2f32365849c425d6ac3d2d88a76378d23961eb96c8422e785ea61f33e4daec02393d51f44b177755749fe84b43f5246d20177800af05752af524265f34f62bd5167fa647d2118aa905a1af53f07e7447bee29675cc23f547339af140c0818aa974ca16da33e767d508e4f56726c7076acce57a9957d08348ef84a39188e800ca44682fccaa9ee1b42e1aaf7738dced1dce3ef2dadfcba2863f36b5f8080ed22539b5176bc2c57e52e4cfde659c1ce9e179c79f85d60ca51c7453dad593190b19a1be8f5c5b0249d70079f10f9d0f07f25a98bd95e6e6f71101842b55347ee008d58522e8f7598c1636c58fd20984a6bb17fd47e7db4bc72854054e7900cac4174cf0b4eda2406842955fd8a2ba00ea4d490dbbab02d659cea4f932d9ee37c8f35daa4740b3273693ee2c1b00965a79d18ad98ae92bf2e1ea84ff1e6181937d38765cb353c6223ead1257d88a8844cb0be17aecc2dd56b78dcd6e2999fe695db248dd68275a5ad0f223a4629b17a040a766b2bd2376d77a422375de14a3daaf4fee92f23ca831452826bc66d0cee2049acbde07bdbb6ce228147f9ed4f9437301e8ca9e1ace0684700e9623a1534212d4c557712a3196d86c86077e97172d7e89436e95e1d7e7629d5bc908e346e504839498890210ca15bea51bb2840f1275d36b99490ff0706aa3ca9e89f33fd99df863acc3bca504c15501ba9d987999ee118f47b7737d2dfe73ab257d680f983da1f5fd5975491ad966989f7b15e76e4e6b1a2987801adb3b7cd4cb1d2c9d0454429c2955643c8fb82ccf8e93051cc10081f8181af0d143deee686f67ec42db1e9914ed047e4bf0006af01028e3839451fa3e17d33586022c63cafaf6d0fc773c96143473316988d32f9943d7477604a27ae4b8a7093bee2cefe10cc02109c748d0676692a2411e5c3b4c4c1b9ac7f9b71a1a7126dacf4615e8c9c3d38f536e8b32e37f406b3dc44db80a00d6e423deec869edb32a411986be1517b6ea45e1f984a6fbd08edb25a305122fe5a90cc46af48ebc36433a1f27f43d85492ea60fd2f43125e7328da93f7aad97f97910112fed7ae7b1785822356a525df1f3ab4637b68d92ecd8d7f234973c686fb11821bb1de5f8459b57892f1dae08aae1924ee60a904d7be6e6611ec3d00002152ab7e0c29c7bf124dbec9a6eff25e619d89c27d187e3ffff63c996c33f4b7e967b607f36a8ac8dba6beb43395c9c9b2e3e36de29b07f9c2d60cdfd1d02813d4e508c56b99405b752758a01cc25bb5436ea1efd52c536fa1d2fb1cd9b1ee006d42b58600be2c1aba59c480cb6e9224d7a4df920598950634033087d3e356f35cd2f8b021d30f4ba79bc60eb6715c6c9bed84648552395cffa97c8cdb8f562f8f127f0e6f86dc61fab11ff782560d88cf2872d0e07a27f38120a0831a93c377298c2ed4fe180eb078422e5f030540fd21ebd414e6c42f1fa5491b5b8fdcada476376732edbfd66e10a475e2c0a43ccf6a41f7879f4577e987695d8d5097f6920fbe2b9ac2cb424de7afded1b5b7db89f3612c487770d58a7bb7517f1fa7a98ff6db3778d40c5f36b27d233a0c18587220f900f4a8e867e33e24c1981acb3445de995132d8fcc58f79ddb1475ba69c464071e95c0707c396c0b1b710cceb51efba5f30a271cd456d5f7216d90b412156ecb01dd41f15ac31980649c5eabc7fbb085a38318d43b0683cba055deb9dde4dc4584935473508837c1023993d50b434b311f126df6a0be0653b97a97bbc9b165098dac8dfd6ed6f033ccf7b32cfa3292296222aebfaec4dcd5066b66be45696067dfab907e2984f1bb6067c170e0617e245c9c09a85a061c4b7e2873ce0571b48d557007d5c7ddf5cc2ffa533e2a3975f3687a6d08a09dc1d285cfed129ec887d70bb5aded429b676c242d57c8f36721bf5732b1f25eced0ffedba7254486c9caab3fb3e0ad3b2dc332a06dadd39e5483a314b1d3086cc198b6b6b272fb56e35e0388b1dcddd484fde0ef9d855ca7bd98ebf0f686cec7d5e37f7b5dffbe4ab28c4422adbaef0c45649b0b830dfff90bbea3b7103ea9dd87d856ba7c5bb485319eecc71acc943c733f489ad72e13b1b232cd1eb4ce87917daad4b0405c9905f7a35501c75332d9acb36057715a6abd0958061fda860c00000000bc9aeac4f47acd022927c381012150fed83a99c2d7b268ff2e1c8d162d3feae2c5bdee747aa10566a94f13d4e1a00a4043bd179310e72ec8e4c68659be77907bba82fc416a72c0d2076821f77e8afdbeac769195a01515ab45ba73ec85a2f8a52146dbbc8d585def095aef4e4491362b596a84d2e9fd0131de2c72b71c4bd239146011eaa209957b2bb3f74bf2f42a17440749688d66a18a9d4a7d1e2bbb34dbb2a45460e69a1ec43467665c59438d35fe9b04a94e408ec4bcf7ba1a25bfc287d6189b65711904be9860f8a68d1bab99eed54890f963caef1fa0179224b650f090f67dca59f1241c2a25bc921d522f61e57d2bad88c057d3f7729499a0391fca3a62b27cc0a9b976da3eef333d88ad128ea757697ffdd50633b66b73ea3ddb565bc3d8780f9c0bb2347551969aaa500e7c030da2a92eb3f78d88b91eb547dba2e9be7ab2aa617f0890c39c73c8c2b35ff7ec529f6b8d08e3fcf2630e454bdb6474185ae72ba69310654c9c0b3ba158fe223954e1d46f9d27b0a4e090b0084918b2964bdcee31d258325b89ef96790ed1df4842b482023f1d22fb3e01280f1c8616153035f10bd65de57c1fa7d5a17e77b12e348bd3019092ef548c5249694168dd24df8a7318eccd779da4f547e9f162f484eb3ab9f5bd196f6b68656725d2624b61d09f73586753a1fb7eeb1721973f8e15522487f1dd1412b0f4846801d1abbfe53b755f15047981b162a1de04d52b4d4762ac877e4d718619e8cdba16df688fe95bdc9a1ee99c21004ba7e72985752d89d6892a4169296703fde314457f014ed89c129a4c83b5bee0bb93cb69a83313442837bc03679ee317cf8d1b908b70fae1b1461a398f310ac073642f954ab39e0eda329a94a5c12cf262ca4a25831dbc10aecf83d9d54776c379c230bb488cd6c9295bc31cfab61eb9b5486726f5c854db8aad2642d4468643f3bc8b25cdc9fda7aad04b06b61b185868a44acd46a0bd8debc1e431f19aeddfa3d0e480949bd361f6c988744acafae954c140192306c3066e8e000070e8cd67b65a59923d166a95ca5e0515e2059e1f1aa9a74bfd49e4e37638bfa6b6117b790c4ec7f536d046c38f8ab6eedac1713bcb8860a18cac43e9add3c68c3ce5d17fbf76e966afcd3ed7795540650e093d39926f5e3719156baa54307b4f5e934f24951b3644a7657e798525d3f1207b28527a5bcdeb33e296c6c0e9e1757941ddd24a0d15c9a21918514a3143ef3fc2e775345ea10aeba6767686e9cfa646da377e88fd759a33ff20c9b258fd37d063d02fe22f090c5e324b507cd3bc42248a7abb2c7d0b1b85ecb5a67bf53a2f25d139ea523808678942e1588fd677df161b67b563a446a2cc69d9126fbf308258a13fcd6f53d92d9947311e3de4fa5acd7c2684d9eb3b4feb024e05bbf090836d92e30b68df6a7619542c9acbbb69dc73c781bdc7ef4b25c2af77186f493a5038a56508cc56b7085e13f4264e02a2a3bb515e15301371520481302f2367c883a5ac503ae4269cbbc8fb2f0f77ecaea7b8af04bc24aa90f677a72bbecfdb225864714344a8fd1c07ef664abaefe53bd76ba12c8bf45860a316812af87348682ee7005ac6a00523f4313102742ee5502d8c61c3321d1b872780192f4d00b12b38d0aedd34619c42f49b81d7bddc4ca481ed8f448bc3ad98b13f7176748838d623e007a24948480e978b80ce67ec952eca613091ad4f81cd521b2851bb8b2a6b1da0420eca80aecac9c0887988e1f29906c9ce65b990a00f22ba6f115a7a0001f511ec35dbcd401130173fded8b2e23365caf3d6d7c8f404383f16fcd76b17c220f88c1fe96211bd92c5803c63d9537a2ceb258508d9b1d74ca43174eaefd677ed6db63bb3d7712c9558c7879fbe67b7396c721407953db9dad13291f96d7d0290ad56cf1f65ccf58d3f5b8ba1f78f81d86ae0ea50926ff352d73629da44a6d31598dcdcf81355faed4f5a6ad8cc39d4a414b97f193c896bd3c270097cc96e4a5e36ca9a56a27c52a03decc4837d7b008acc1fd2724f97e0e9591afb5de3af3ec5fc16e1bee79098cc94d638375d69ae5065bedaed575e11b1b0a4d1189830856e8d48a6c50bf18cb9f8919fd8a55ad0b2f7d8c096c7f549fec8e1522be0de2a69699afe47e899ac6d5405c08e2e374326808ba76259d85b971dcce55aceed11583603dd280fd15c8e7b206e8bade3f6d83c6041838ea8b489fb9f92ab220ad5d3cd2af3f45cb2df7094d550b2cfea314469943a159e12c01897a7cc42904eeb24cc507eff010000d22efdcd5cb5d75975582e14960fb0f2b83cb774faea32dfba7ed0e8b6a749785166cb5c77dde7498f67f7f20d0b85a7fe6e7f8a8e3f95bd795165f36440d84434cef17f81697816030e3a86bf003272ca4868ab935fa0d465fb10637a706c9fd04fa4d4eb421e87aa6628a1d6174833af4dbfceab7fc5989550c0847bf27a5243e3b318fffde95d11cf507bc4e092180dd228df9f89d193a160d50c223309eae580a09f4f2f807f17f8ad25c1f5814becdfca7948c7045b242e22d5efab676fe717eb34d2f0fcb77289c8b12caadd2377b7ccdcfab61900971b4a2ac132587174117428739ebb109fa133e483956bd499dfa530cbb3d1df42309f6f0755b043d85776807f25c3b4b518a2274671eb38f3e82ad4397377f85201771877a7cc43b838791a4d4d655ecadf03d8c1687e961c83dbb64c4d54d4b745a3abca7e381a00c6f51f48f6f7ce29ec656d89a1fab216675febedfe6b08c35add5aeb8cf6c0b226d309a222e1783e45e560f6ea64bf7706787f199116341f874321b52b1135830ab8979ae5546aad4ecfdac0045d4d15b4ed2fe26e484793db6aa61d40333355fa96ac5d1b8a5b5fc033475cba14f344007bfd82deb64b5c2eda6c0d528e4de0c21802d6b27554c0e2090f2c4ebd19208ce904cc02756b44bb2f8ebc1d37961c0957a4815487cbf76fdbe1f2b77b563a5663a00952c92579399f7acc1d41d9289ea0345f02f6f760ced802c8e0b14760a43dd04e6c371ceab9f5cb3617cd7ab31457b6821c6a4f34b243fba61f5c553e58ca253d5723382cf5d3f8357347ee2af2d48d86367f993e4b80b849dd3f50b2a89338af97e11b9a796ae2548856cce01334bca0c558e160f16e74699c7eaefd699acdf4d5019bf70f2d9c083f62b5254262f05c01dba59b1779502d3ad310a3039447d730a2cebb1242331a9849921c07336e985a844c55ce6129a650b3fd7cbda52a0cfdf0ef566f24adb8c959e442e9d5663fa16561b185cfb18355863d9b9f91c3829c4b0ba580668402a7a100fcd4a4e901b660863a9537f46e4f36446945e8f62e53e8282ccd7cfe14fca161d7daf592188eb2e11e275f616f4e692db8f318e8fb635d1a2582a3c8ad3050995f4cd810c04b23aaa6b26a2276133b443280f0526c9b1c016a7fdc052eff91d167b2813ec4f868c2da5fd9568da148e0ced0229f415716c1caddba880efa2017a82829125e734b96333da0b15340c149b50be86e3017bdaae3d80ae51c35df37e67684e81b5933cc7bfbe7ef0486d57e3901f9ae3eb1d592eb3fc244ce6555d3d69922dd3dcefecbba207fcbd5144a5ff97bf2216c046348a633284db59c10662350c7484ced762f353cd01a971c88d0eabb68eef856d585e8f5a684dc948b094754362ba8d606f85a755a27895ff5b6b4ea0387574afdf362a43b5535a2838b3f00f24612b9ae47e95f15d8b828efe56152d77871cfda0e0ff9936db3fe9c49f0d0f5ef9b71b81efd2e92d0166a4970254950a51235b66866d5402740adaa584e892572a6f46714704660cfbcaa56ce27cb538a908d1ee2fc7adaa674ce7a717f6e0481a2374f768fa3df8368bf4281bce6f9777f958f36502908d7c921ba745d0cc16b8a9a67f15c26d4b005788b1e90b19cc13f3e925fc14ef31d624c7500710d8f80e5bd4b14dd6bf70c210db6077c69d2d1751fe999442502d3542be12b732e3793e6c5e5c33a15a792ea344b0ed0be1ebb1d4e896e3e62d8d85afad2ae134dabc4f0d3fc719c6245d3bfafa42f0cdc9c0d5c4ba5c20b9da975bfd2f211bee8589ce1dc9652c2c3cee2a5e8a00049e42afe4403a905b60e0dcda1120d32ce36b91719d6308c93dfaa16c23a3b37e88194778be77d5e9e64b39477b76b4644ca32525b73bcf1fd9dc9af7776f2149e368053c58e1c93e1ec4575cb5e0b2da61d5e6b19436f3c095cdb4af4ddfc3364975700e5ff5275f9336b8cb3b959a1cd94f6b9c3a33f35e9ba4b7fea0466edf54e5e2e06a79bd170392c02b09749f3d111ef60baa8016dbf9ba581beab2c43d094add0d7fb7e16f198f3050641255f30a57c3045c1b51dcde5d65613167596365b9c67aaa36fc89c44fbc4c8c96c328554a63a15511b04692651dd5e30780caf0dfce976c665e7b05fa6143914837bc82fb9d9dc5a1660e28a697e8a0a32eb8db109c5a045243d86ea11847fb64ec450112d77ecba32de418629a4ea2ae3f7ed3625b26def5c19813a6386ab4e43838c1fad3d4e92dfd7d3f98b3cf46d6e20304851899c59661e9639f3ff52fa023114907d930d74d605f3f7c5fd9ebb446d807e96cf3bf3517e369dc98f489026ec035a86f3719e1e50a48c0381f7fd2a7eea1d3a09ef7a0ba50b2ae28c2c955db4761ac005226ebc0c18d108e8ac066371be249b80eed88afee799411a50381cacb2d5164f0827720eb9d11b5cc548c2e145291dfbc5d4f70646dfbca077ce8ad3a3f8c627021295cbef70f5013c53e8fce32116e678a7b1dc535d43b429d330e9193f8de1a6c1da4353a86bc722ef1cffe59a012ff9c5f45b85e55ebdaa6b36a519c544ef8a86095e522d7dfbb9cac41e826fcc4bc676297141195f839ebcd8f64599fb15856960f97bc70d2336507d5060282d0988f354eb757c6f4b0ee77e2c0889e5336633ac28e2651c98e7f2fa4c163f8fc196b6798c1400c46710abed12a33a95afa56c7fe55de0b48cc984c80f6d98d212daeefdbcb457217b3962436e481d70967cab6b0943d5da59021ea9fbebf66e86943e029ef95d46d347b834098e1c8fb4c35d15945bc2e336f74c6c80430ad5fc4f5b9c6b41245ecf151eea90763ce3e09e050ae1c0925fa7a5ddbb7f210226cdcf9ee406041b73a5988646b90ed382d08e7a147078f9de025f5617017ec70f65dd25d7ccdb47ad7209474f4ca461ca46f0afe3cb405c3b72d320016d01b62def93fa4fa5a34df145c526fc497329a9e29ce17a929893f7beb417c88804418271dbeb51015821db4737b9cc467f190209649f543675defbf95640d20cdd124e85788b703213f4e99b4f36b74b5d44b67b7bc995ba133da4ae82f3a3db49c9ec039e0285001fc16760da0d07552e1ad621a4bac6d0b6409316e8a78273b79aa70df0e3ca024336d42c530550be8c68897bfa6a44f595bf5be48f8b25b48825ebcba815db4b3124522bc71e3970dbcafd479a6dab40f745a655cc3f9dd5aeb046d25baaaa160ba21f8b3c0292329ae107483c8caafcd70d041facfbf705dda95370a91879fc0ab9132e3b7b02cad69417178c4f34909df7a373bacb289476c25c901be7b52aabfdfcb3415ef3a565c7de2f0128c63e16984e2e98ad23e06b890f22894ebeceefdb472192e501e2c791232933b52ea4b9c4e9fe3654b8b1e08048fbcf58fada1cd49ca6658ce6ecd12102d90c81eac26090efa36514553abb298f7cf1a43bd6d473c1436b6be9e87445de726cfffb00c72de49db0585d677d5b245e15f9a53b4c258ba2fd67d38afd9ccd0d409c0bad675fcfbc1f4e5166fd1b29203274f758f55a266b8f7c9ec8ef1dd4913727fa392ce6b11baf902ea708adddd836982a609718c1dfb810aee6f21e47c27dc6b4eeebe5fc21aae6fe7d2908679c873e2aa45a1ee14cd7e10586216d5e17cdbfacd4bfedf00b7ba7fc46d4ac90667329ba76b4fcc6b991a55c9ed159a2fb9525c975bc0aa4a291fdde14a78b95adcde52fcb5a893ee7b4df6631b3ed5a9d9d9ebe36afcedea777a9e67faad7f7004f0a820aeb6636f24685a15d12abc639aab2233b36584670c667f9e7a3fe1195d35b268d1052d5b4c9625dc963640c2c5e6c37d36acc31755b34f3ee2af7b7ba5dbe105322a3741c567c9edd817f6488fe69301b19481fe2e2cf74b19d4b224598b0ce1fa151fa1ef3d69aaeaab397a5eac72e0b969a09b85e3258e891db207393bc281afa93468b29b7e55cc2decf8292fc68e1a02b2faa873a846680992b37a548c8f724c0125027faa58be5b2836206cc34c063b50270d7fc968dab0d38072ca90bdef91119b72ab417d811d2f32bd41e6ab2bc5b5293f92f7a0a4f172bfea5403cd418db95e1a4232f78f6afd3d13978e206d85fa9ebe2abe444db065d03b6169bc9f0dbfc19237a74bd13c1ef844f839b20018fdaf1be6f1a171f6f3ce2205fdcce38330b88ceba0c5eae812e12be99993d265f806e61ec42c9527287967a1c3b27afb1edc35a5d17bb7f4d20ea708c62c9170ba2ab710f2d7f5dca7b33e0f9434cf0b6ee846fc8bc45d39f252ec682732fb090f46032491155d83a30894a259e037e57de7523481bcc2d704d8d728fbdf048df30f7e4861f62b8e63de47b3838b5062ccd2c125bc581024ea76bd4b1f53057f37d329f7861a2a70fd3b6d6fe252a1b892192ed75c585ab809f702e27e237c4aa2dc947585c2086eeaa29c3ff7e02cb7d3a0aa3a8156d2897daa9c45a2e28ba14fd40c8a3a058805e4b5b10641c3c25b9ab80cce83206b13a1e2bc362eb5ab7e0e677c01fc0486aa32862ad0afa4f1cc8496b961a0eec71c26ad107ead599d8ddd59d85adceb3ea442efcf8ed64f4c66547344dc81ef5b6ac102434395203f58d59656d41dcc192774d70f4f2964e304efde831126d402a240325e603347aa43626b5eb69b0", 0x2000, &(0x7f0000004700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000047c0)={0x90, 0x0, 0x7fffe, {0x5, 0xfffffffffffffff9, 0x7fff, 0x4, 0x0, 0x2, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffff, 0x1, 0xc000, 0x0, r9, r10, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000004880)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0x30, 0x4e21, 0x0, 0xa, 0xa0, 0x20, 0xbd, r4, r9}, {0xffff, 0x100, 0x100000001, 0x6, 0x4, 0xfffffffffffffffe, 0x100000001, 0x6}, {0x9, 0x6, 0x7, 0x4}, 0x1, 0x6e6bbc, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0xff}, 0xf, @in=@rand_addr=0x64010102, 0x0, 0x1, 0x1, 0xb, 0x9, 0x0, 0x2}}, 0xe8) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c000000030101010000000000000000020000000c001980080002000d0800003c0002802c0001"], 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x22020600) r0 = socket(0x2d, 0x2, 0x0) connect$netlink(r0, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x8}, 0xc) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="1c0000001a009b8a140000003b9b301f000000f40000000000000000", 0x1c) recvmmsg(r1, &(0x7f00000000c0), 0x400000000000ec0, 0x2, &(0x7f0000000100)={0x77359400}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) executing program 3: syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000001980)=[{0x1, 0x811, 0x0, 0x0}, {0x9, 0x5401, 0xc1, &(0x7f0000000680)="a4337d15c1662487935f3152ffd6d1f0e4401a2a990791b05f5522a52584b4acef31f52d61919fe3e76df4b8b1eaf6b5da9b96a1d8a326ca5795eac38b4166bce148e3c645243486649602b4bd920f7ce57dfdc76f6566f2661c858db3039dee80d8727e79481aed812f870cea584ef520be0201caf84624867cc18e67c37ca6537345c1400fdb2e0f7041389d736e0650d2e42a9daf7721f4c44ccb1ed3befc85209b69bb640fa3ac30f3d1a08d34913225b82daa766a58756c6ed54c77bf876d"}, {0x9, 0x0, 0x0, 0x0}], 0x3}) executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'ip6_vti0\x00'}) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x40, @empty, @local, {[], @dest_unreach={0x1, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x1c, 0x4, 0x40, @empty, @empty, [], "4500001c0000ffff"}}}}}}}, 0x0) executing program 2: syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109023800010000000009043200019740a400052406000105240000000d240f0109000000020009004e06241a00b51409058203ff"], 0x0) r0 = syz_usb_connect$midi(0x6, 0x8a, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x30df, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x1, 0x1, 0x36, 0xc0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x30, 0xee, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x55, 0xe}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x23}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x5, 0xf1}], [{{0x9, 0x5, 0x8, 0x0, 0x200, 0x1d, 0x7, 0xff, {0x12, 0x25, 0x1, 0xe, "b2b8f030da83abd993e945e4b4c0"}}}, {{0x9, 0x5, 0x0, 0xf, 0x20, 0x81, 0x0, 0x5e, {0x10, 0x25, 0x1, 0xc, "3ac666f4659c178c5a7ff023"}}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0xe, 0x81, 0x6, {0x10, 0x25, 0x1, 0xc, "70bf8eae3eba40009ca495c1"}}}]}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x2, 0x5, 0x3, 0x20, 0xff}, 0xc, &(0x7f0000000100)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0xf, 0x67a}]}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000000)) executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x3c}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1b00}, {0x3}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x48080) executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000800)='syzkaller\x00', 0x4, 0xff5, &(0x7f0000000840)=""/4085, 0x40000000}, 0x94) executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad10102030109022400010000"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_disconnect(r2) syz_open_dev$evdev(&(0x7f0000000340), 0x3e, 0x202444) r3 = syz_usb_connect$cdc_ecm(0x5, 0x5e, &(0x7f0000000380)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x9e594254eba08ff8, 0x2d, &(0x7f00000003c0)=ANY=[], 0x0) syz_usb_disconnect(r3) executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4442, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0xbdcb}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x224, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x1bf, 0x33, @mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xe}, @broadcast, @device_a, @random="29cd1b0efd0f", {0x1, 0xfc}}, 0x2000, 0x5, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0xcf, "2689dbaf9eddac828792c79bbbffc207b95a3baba0ae69794b363c353632c45f3af7e85f9da38c6b8d68f768f3bc6b993b215fc2bfdce4160fc043a176363e973c4c2c55b87bc1798367a58cca8c0885aedad01abb49e5131e592907c3e9b34b859be543c3d72b83d5f9675bcd177ad7ce41954ae0e3baaacd3bd73010b62b338d955a536975cadf647e0e1e06c1c00393e09b2762b2da9e07bdd3dd2d53d41132586f0451b11fee7ae278c46b493aa72f510ee0c1066ccb4eef85750bb43439fcc16013585ba3b660b86f2f07a5b8"}, {0xdd, 0x37, "198ef4264fcad6a40da4347352af2b7c1fb199bac62c768d68f09c3548ccf247a1ad59ed65fee0a1efc3fc30d55ba80d19a0106095f8e5"}, {0xdd, 0x8b, "0c6ac7ff9aee9d587d05d52ea68c912807652b9caa8f506597e61ce201fa5da98068112f0cdaf30073060a424c7643f735807f55fd9003e7b3e8f1a12a2b3642b8b279cc47b539846d7c48c2ba469bff80ae938126ee5429162eaac2390d36fd3ccb493b85efd7a9fb52a0ff7ba0ce6165a461cf21d9410f502a62974c25c9ab1f604c3b4cbff22a11328e"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x224}, 0x1, 0x0, 0x0, 0x4040}, 0x4801) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f00000003c0)={0x6, 0x3, 0x1}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000400)=0xffff) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000480)={0x5, 0x20, [0x3, 0x688, 0x9f2, 0x4], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000004c0), 0x100) write$6lowpan_enable(r3, &(0x7f0000000500)='0', 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x6ce00, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r4, 0x8010aebc, &(0x7f0000000680)={0x80a0000, 0xc000}) r5 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)="2a13e1258fb15379be6602669c61557354cc35ac3d4ecb60939db8b463ae711a6731a999a20ed185182122c689858c65c6a0038d37ccbe190e63f85f4f74300ee5e841dcb8ed391f806000553cac5081347b59e69e2a95b29e658fb201b41b569178b8480131294cafafa11fc1c3dc8cdbbfb8c460d006556b8dbdfeb9dd", 0x7e}], 0x1, 0x0, 0x0, 0xc890}, 0x24040045) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000800)=0x7fff, 0x4) socket(0x9, 0x2, 0xff) r6 = syz_create_resource$futex(&(0x7f0000000840)=0x1) r7 = syz_create_resource$futex(&(0x7f00000008c0)=0x1) futex(r6, 0x1, 0x1, &(0x7f0000000880)={0x0, 0x3938700}, r7, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000900)={0x5, 0xffffffffffffffff, 0x1}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000940)=0x0) mq_notify(r1, &(0x7f0000000980)={0x0, 0xd, 0x0, @tid=r9}) socket$kcm(0x29, 0xd, 0x0) ioctl$UBLK_U_CMD_STOP_DEV(r1, 0xc0207507, &(0x7f00000009c0)={0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000a40)={0x9, 0x7, {r9}, {0xee01}, 0xffffffff00000001, 0x7}) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f0000000a80)={r10, 0xffff, 0x0, 0x0, r11}) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event bisect: bisecting 37 programs bisect: split chunks (needed=false): <36> bisect: split chunk #0 of len 36 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 27, 30, 5, 28, 30, 2, 30, 14, 18, 2, 21, 4, 3, 3, 2, 2, 24, 6, 30, 3, 4, 18, 30, 10] detailed listing: executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000340)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000f80)={0x0, 0x1c, &(0x7f0000000fc0)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f0000001000)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000001040)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(r1, 0x84, 0x7d, &(0x7f00000010c0)={r3, 0x3}, 0x8) executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newtfilter={0x490, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x460, 0x2, [@TCA_ROUTE4_POLICE={0x454, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x8, 0xb, 0x200, 0x3, 0x8, 0x665, 0x4, 0x5, 0x34, 0x6, 0xa233, 0x62, 0xad, 0x3, 0x80000001, 0x5, 0x2, 0x6, 0xd906, 0x0, 0x8, 0x80000000, 0x1c7, 0x9, 0x7, 0xf, 0x7fffffff, 0x0, 0x515a, 0xa4, 0x2, 0x8, 0x8, 0x0, 0x100, 0x6, 0x78, 0x8000, 0x5, 0x5, 0x9, 0x2, 0x7, 0xa0, 0x4, 0x5, 0x8, 0x2, 0x7, 0x1000, 0xfff, 0x141, 0x9f, 0x1, 0x37ac, 0x3, 0x2, 0x5, 0x401, 0xe386, 0x0, 0x0, 0x3ff, 0xfffffffe, 0x5, 0x2, 0x6, 0x9, 0x80, 0x60, 0x6ffd, 0x2, 0x5d33759a, 0x7, 0x2, 0x4, 0x7, 0x3, 0x3, 0xdcb, 0x401, 0x5, 0x3, 0xe, 0xfffffff8, 0x5, 0x9, 0x7f, 0x4, 0xd, 0x6, 0x0, 0x1, 0x3, 0x7000, 0x4, 0x7, 0x1, 0x9, 0x2, 0xc6e0340, 0x4, 0x401, 0x15, 0x101, 0x4, 0x7, 0x3ff, 0x398e, 0x2, 0x10, 0x7, 0x0, 0xc, 0x1588cdd2, 0x11be, 0xffff, 0x2ac, 0x5, 0x3, 0x3, 0xfd, 0x4, 0x4, 0x9, 0x0, 0x8, 0x6, 0x6, 0x9, 0x3553, 0x5, 0x9, 0x6, 0x8001, 0x1, 0xffff, 0x6, 0x0, 0x5, 0x40000000, 0x6, 0x4, 0x0, 0x5, 0x7, 0xe, 0x5cb7, 0x5, 0x11561d4e, 0x5, 0x5, 0xffffff80, 0x4, 0x2, 0x5, 0x3, 0xffffffff, 0x101, 0xef, 0x6, 0xa, 0x6d37, 0x7fffffff, 0x8000, 0x7fffffff, 0x80000001, 0xaba5, 0x1, 0x7, 0x5, 0xa3e0, 0x5f, 0x3, 0x9, 0x80000000, 0x1, 0x81, 0x9, 0x800, 0x0, 0x2ced, 0x10, 0x8001, 0x5, 0x7, 0x100, 0x1, 0x4, 0xe, 0xfffffff9, 0xffffffff, 0x2, 0x4, 0xb4, 0x9, 0x0, 0xdf3c, 0x4, 0x6, 0x4905, 0x3, 0x3ff, 0x3, 0xcace, 0x200, 0xc5c, 0xfffffff8, 0x9, 0x3, 0x3ff, 0x0, 0x100, 0x3, 0xb, 0x4b73, 0xfffffff9, 0xffff, 0x55d, 0xff, 0xc, 0xffffdfff, 0x4, 0xfffffff8, 0x4, 0x1, 0x4, 0xa, 0x55d0, 0x8, 0x2, 0x0, 0x307, 0x7fffffff, 0x3, 0x5c18, 0x2, 0x8, 0x2, 0xb, 0x5, 0x100, 0x6, 0xc, 0x8, 0x1000, 0x3, 0x2, 0x0, 0x800, 0x4, 0xa, 0xfff, 0x8000, 0x381]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0xad}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa2e}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x2}]}}]}, 0x490}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x400) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0xe) r1 = open(&(0x7f00000005c0)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f0000000600)={0x1, 0x3, 0x2, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x200) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000740)={0x1, &(0x7f0000000780)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x6c28c0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x7b) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000bcb2a43c9bf84dade0acb18e63bc7c6763cf785ca6e2c1ba2d70d7c9ffb664cb94e71b2f59e046afcade085c5652a58fbfb7895820cccf156bfdb1bb515cb73b777ad9dc2f1e2f6cdd50a9e2571794d7a056b7f771", @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0xd, &(0x7f0000000980)=ANY=[], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r4, 0x0, 0xe, 0xe, &(0x7f0000000a80)='\x00'/14, &(0x7f0000000ac0)=""/14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={0x0}}, 0x8040) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000b80)={'bridge0\x00'}) syz_mount_image$fuse(0x0, &(0x7f0000000bc0)='./file0/file0\x00', 0x18001, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) syz_open_dev$usbmon(&(0x7f0000000d00), 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000d40)={0x3, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="0203000210000000fbff0000000000000200080008000000660000000000000005000600000000000a000000000000000000000000000000000000000000000101000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8000000000000000000000000000aa0000000000000000"], 0x80}, 0x1, 0x7}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000e40)={0x2020}, 0x2020) executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000002, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7e, &(0x7f0000000100)={0x0, 0x8690, 0x40, 0x6, 0x20002f6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x50) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000200)=0xf3b, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000004c0)=0x2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) getsockopt$inet_sctp_SCTP_ASCONF_SUPPORTED(r4, 0x84, 0x80, &(0x7f0000001c80)={0x2}, &(0x7f0000001cc0)=0x8) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000500)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000001d00)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) bind$tipc(r6, &(0x7f0000001d40)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000001d80)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000001dc0)={0x42, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r5, &(0x7f0000000a00)='q', 0x5e0, 0x881, &(0x7f0000000a40)={0x11, 0x8100, r7, 0x1, 0x87, 0x6, @broadcast}, 0x14) io_uring_enter(r1, 0x6c7e, 0xa5a, 0x16, 0x0, 0xfffffffffffffda3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_emit_ethernet(0x35, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180c20000000200000000010027424203"], 0x0) syz_emit_ethernet(0x35, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c2000000020000000001602742420300"], 0x0) executing program 5: r0 = memfd_create(&(0x7f0000000540)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000580)="4fbbd1479f07edd315133cfaee3b43c23a0dd466b5222ff79d8f", 0x1a) sendfile(r0, r0, &(0x7f00000005c0), 0xffff) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = open_tree(0xffffffffffffffff, 0x0, 0x900) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r3, 0x0, 0x0, 0x4}, 0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x1000, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x80, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) truncate(&(0x7f00000007c0)='./file0\x00', 0x100000005) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x94) write$dsp(r2, &(0x7f0000000080)='\\', 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000840)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newlink={0x44, 0x10, 0x401, 0xfffffffa, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1705, 0x204ee9f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000980)={r7, @broadcast, @local}, 0xc) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000180)=0x2) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f00000002c0)={0xa3, 0xd, 0x4, 0xfe, 0xe0, 0xfeff, 0x0}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, &(0x7f0000000200)={0x1, 0x3, 0xffff5f11, 0xfffd, 0x6b78, 0xc, 0x40ff, 0x1fa, 0x4a, 0x28, 0xfffffff9, 0x2}) close_range(r1, 0xffffffffffffffff, 0x0) r10 = open_tree(r3, &(0x7f0000000480)='./file0\x00', 0x100) ioctl$XFS_IOC_COMMIT_RANGE(r2, 0x40585883, &(0x7f00000004c0)={r10, 0x0, 0xef8, 0x7, 0xe0, 0x4, [0x3, 0x15363e5b, 0x3, 0x401, 0x8f0, 0x4]}) executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) (async) r0 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000001500)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0x7f, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000001780)={0x0, "7f7acb036ad32033e27c8a2de7608e32d0a00f79d7103e9558e81ef72464f27ceb521b96ede4b47bbcf13ea0ae57ec7becb27b8c429108adc2ae6ff315b1be23", {0x572, 0x6}}) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000001980)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0xc182, 0x8001, 0x8, 0x5, 0xfffffffffffffffe, 0xfffffff9}) (async, rerun: 64) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) (async, rerun: 32) sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x7) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) (async, rerun: 64) recvmmsg(r2, &(0x7f0000002a00)=[{{&(0x7f0000000140)=@nl, 0x80, &(0x7f0000000bc0), 0x0, &(0x7f0000000c00)}, 0x3}, {{&(0x7f0000000c40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000000)=""/68, 0x44}, 0x3}, {{&(0x7f0000000e80)=@l2, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000001140)=""/253, 0xfd}, 0x40}, {{&(0x7f0000001240)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f00000012c0)=""/44, 0x2c}, {&(0x7f0000001300)=""/81, 0x51}], 0x2}, 0x1ff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/106, 0x6a}}, {{&(0x7f0000001900)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000080)}, 0xe865}], 0x6, 0x40012002, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0xffffffffffffff50, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20008040) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xe0d9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) r4 = syz_open_dev$usbfs(&(0x7f00000005c0), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000001840)) (async) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000001880)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f00000018c0)=0x1) (async, rerun: 32) syz_emit_ethernet(0x5f, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428e916293afffe880000000000000000000000008001ff0200000000000000000000000000018900907800000000fe8800000000000000000000000000011f02d462daf76d13b82ce3b95fcce69e43"], 0x0) (rerun: 32) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x18) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x2, 0x40, 0xfffffff7, 0x9, 0x0, [{0x0, 0x3, 0x7, '\x00', 0x2}, {0xb7, 0x9, 0x5, '\x00', 0x9}, {0x2c, 0x0, 0x0, '\x00', 0x8}, {0x3, 0x5, 0xff, '\x00', 0x5}, {0x6c, 0x6, 0xc, '\x00', 0x3}, {0x5, 0x3, 0x1, '\x00', 0x1}, {0x88, 0x8, 0x1d, '\x00', 0x8}, {0x1, 0x70, 0xb, '\x00', 0xa2}, {0x2, 0x6, 0x0, '\x00', 0x3}, {0x4, 0xd, 0x88, '\x00', 0x79}, {0xc, 0xd5, 0x3, '\x00', 0x1}, {0x2, 0x0, 0x1, '\x00', 0x7}, {0x80, 0x1, 0x9, '\x00', 0x1}, {0x81, 0x3, 0x8, '\x00', 0x2}, {0x3, 0xf7, 0x5, '\x00', 0xb}, {0xe, 0x2, 0x80, '\x00', 0x3}, {0x5, 0xd3, 0x15, '\x00', 0xa}, {0xff, 0x7f, 0x2c, '\x00', 0xa}, {0x2, 0x6, 0x1, '\x00', 0xe}, {0x9, 0x10, 0xce, '\x00', 0x5}, {0x8, 0xfc, 0x5, '\x00', 0x8}, {0x2, 0x14, 0xe, '\x00', 0xa}, {0xb, 0x1, 0x10, '\x00', 0x1}, {0x1, 0x3, 0x4, '\x00', 0xd}]}}) executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000e40)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000001100007802"], &(0x7f0000000e80)=0x2a0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x1) fsmount(r1, 0x0, 0xa) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'lo\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000300)=0x0) r8 = eventfd2(0x3, 0x80000) io_pgetevents(r7, 0x2, 0x0, &(0x7f0000000340), 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000380)=[&(0x7f0000000680)={0x1802, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, r8}]) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_destroy(r7) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x2, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xfff2}, {0x2}}}, 0x24}}, 0x0) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r2, &(0x7f0000000140)={0x6000000d}) sched_setscheduler(0x0, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0x0, &(0x7f00000003c0)={0x8, 0x110008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) unshare(0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) socket$unix(0x1, 0x1, 0x0) executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000540)=0x11) readv(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/180, 0xb4}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utimes(&(0x7f00000004c0)='./file0\x00', 0x0) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000080)) r3 = open(&(0x7f0000000040)='.\x00', 0x80080, 0x20) linkat(r3, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) openat$cgroup_int(r3, &(0x7f00000003c0)='cgroup.clone_children\x00', 0x2, 0x0) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010028a6704cdbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008000d000100000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000302040008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = accept4$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10, 0x80800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) r5 = fanotify_init(0x2, 0x101000) pipe(&(0x7f0000000140)={0xffffffffffffffff}) fanotify_mark(r5, 0x1, 0x4800001e, r6, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000002680)={0x50, 0x0, r8, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x5}}, 0x50) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0xc0202, 0x0) writev(r11, &(0x7f0000000380)=[{&(0x7f00000003c0)="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", 0x200}, {0x0, 0x20000}], 0x2) syz_fuse_handle_req(r7, &(0x7f0000002700)="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", 0x2000, &(0x7f0000004700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000047c0)={0x90, 0x0, 0x7fffe, {0x5, 0xfffffffffffffff9, 0x7fff, 0x4, 0x0, 0x2, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffff, 0x1, 0xc000, 0x0, r9, r10, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000004880)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0x30, 0x4e21, 0x0, 0xa, 0xa0, 0x20, 0xbd, r4, r9}, {0xffff, 0x100, 0x100000001, 0x6, 0x4, 0xfffffffffffffffe, 0x100000001, 0x6}, {0x9, 0x6, 0x7, 0x4}, 0x1, 0x6e6bbc, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0xff}, 0xf, @in=@rand_addr=0x64010102, 0x0, 0x1, 0x1, 0xb, 0x9, 0x0, 0x2}}, 0xe8) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c000000030101010000000000000000020000000c001980080002000d0800003c0002802c0001"], 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x22020600) r0 = socket(0x2d, 0x2, 0x0) connect$netlink(r0, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x8}, 0xc) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="1c0000001a009b8a140000003b9b301f000000f40000000000000000", 0x1c) recvmmsg(r1, &(0x7f00000000c0), 0x400000000000ec0, 0x2, &(0x7f0000000100)={0x77359400}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) executing program 3: syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000001980)=[{0x1, 0x811, 0x0, 0x0}, {0x9, 0x5401, 0xc1, &(0x7f0000000680)="a4337d15c1662487935f3152ffd6d1f0e4401a2a990791b05f5522a52584b4acef31f52d61919fe3e76df4b8b1eaf6b5da9b96a1d8a326ca5795eac38b4166bce148e3c645243486649602b4bd920f7ce57dfdc76f6566f2661c858db3039dee80d8727e79481aed812f870cea584ef520be0201caf84624867cc18e67c37ca6537345c1400fdb2e0f7041389d736e0650d2e42a9daf7721f4c44ccb1ed3befc85209b69bb640fa3ac30f3d1a08d34913225b82daa766a58756c6ed54c77bf876d"}, {0x9, 0x0, 0x0, 0x0}], 0x3}) executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'ip6_vti0\x00'}) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x40, @empty, @local, {[], @dest_unreach={0x1, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x1c, 0x4, 0x40, @empty, @empty, [], "4500001c0000ffff"}}}}}}}, 0x0) executing program 2: syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109023800010000000009043200019740a400052406000105240000000d240f0109000000020009004e06241a00b51409058203ff"], 0x0) r0 = syz_usb_connect$midi(0x6, 0x8a, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x30df, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x1, 0x1, 0x36, 0xc0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x30, 0xee, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x55, 0xe}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x23}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x5, 0xf1}], [{{0x9, 0x5, 0x8, 0x0, 0x200, 0x1d, 0x7, 0xff, {0x12, 0x25, 0x1, 0xe, "b2b8f030da83abd993e945e4b4c0"}}}, {{0x9, 0x5, 0x0, 0xf, 0x20, 0x81, 0x0, 0x5e, {0x10, 0x25, 0x1, 0xc, "3ac666f4659c178c5a7ff023"}}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0xe, 0x81, 0x6, {0x10, 0x25, 0x1, 0xc, "70bf8eae3eba40009ca495c1"}}}]}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x2, 0x5, 0x3, 0x20, 0xff}, 0xc, &(0x7f0000000100)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0xf, 0x67a}]}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000000)) executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x3c}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1b00}, {0x3}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x48080) executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000800)='syzkaller\x00', 0x4, 0xff5, &(0x7f0000000840)=""/4085, 0x40000000}, 0x94) executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad10102030109022400010000"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_disconnect(r2) syz_open_dev$evdev(&(0x7f0000000340), 0x3e, 0x202444) r3 = syz_usb_connect$cdc_ecm(0x5, 0x5e, &(0x7f0000000380)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x9e594254eba08ff8, 0x2d, &(0x7f00000003c0)=ANY=[], 0x0) syz_usb_disconnect(r3) executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4442, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0xbdcb}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x224, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x1bf, 0x33, @mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xe}, @broadcast, @device_a, @random="29cd1b0efd0f", {0x1, 0xfc}}, 0x2000, 0x5, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0xcf, "2689dbaf9eddac828792c79bbbffc207b95a3baba0ae69794b363c353632c45f3af7e85f9da38c6b8d68f768f3bc6b993b215fc2bfdce4160fc043a176363e973c4c2c55b87bc1798367a58cca8c0885aedad01abb49e5131e592907c3e9b34b859be543c3d72b83d5f9675bcd177ad7ce41954ae0e3baaacd3bd73010b62b338d955a536975cadf647e0e1e06c1c00393e09b2762b2da9e07bdd3dd2d53d41132586f0451b11fee7ae278c46b493aa72f510ee0c1066ccb4eef85750bb43439fcc16013585ba3b660b86f2f07a5b8"}, {0xdd, 0x37, "198ef4264fcad6a40da4347352af2b7c1fb199bac62c768d68f09c3548ccf247a1ad59ed65fee0a1efc3fc30d55ba80d19a0106095f8e5"}, {0xdd, 0x8b, "0c6ac7ff9aee9d587d05d52ea68c912807652b9caa8f506597e61ce201fa5da98068112f0cdaf30073060a424c7643f735807f55fd9003e7b3e8f1a12a2b3642b8b279cc47b539846d7c48c2ba469bff80ae938126ee5429162eaac2390d36fd3ccb493b85efd7a9fb52a0ff7ba0ce6165a461cf21d9410f502a62974c25c9ab1f604c3b4cbff22a11328e"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x224}, 0x1, 0x0, 0x0, 0x4040}, 0x4801) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f00000003c0)={0x6, 0x3, 0x1}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000400)=0xffff) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000480)={0x5, 0x20, [0x3, 0x688, 0x9f2, 0x4], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000004c0), 0x100) write$6lowpan_enable(r3, &(0x7f0000000500)='0', 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x6ce00, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r4, 0x8010aebc, &(0x7f0000000680)={0x80a0000, 0xc000}) r5 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)="2a13e1258fb15379be6602669c61557354cc35ac3d4ecb60939db8b463ae711a6731a999a20ed185182122c689858c65c6a0038d37ccbe190e63f85f4f74300ee5e841dcb8ed391f806000553cac5081347b59e69e2a95b29e658fb201b41b569178b8480131294cafafa11fc1c3dc8cdbbfb8c460d006556b8dbdfeb9dd", 0x7e}], 0x1, 0x0, 0x0, 0xc890}, 0x24040045) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000800)=0x7fff, 0x4) socket(0x9, 0x2, 0xff) r6 = syz_create_resource$futex(&(0x7f0000000840)=0x1) r7 = syz_create_resource$futex(&(0x7f00000008c0)=0x1) futex(r6, 0x1, 0x1, &(0x7f0000000880)={0x0, 0x3938700}, r7, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000900)={0x5, 0xffffffffffffffff, 0x1}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000940)=0x0) mq_notify(r1, &(0x7f0000000980)={0x0, 0xd, 0x0, @tid=r9}) socket$kcm(0x29, 0xd, 0x0) ioctl$UBLK_U_CMD_STOP_DEV(r1, 0xc0207507, &(0x7f00000009c0)={0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000a40)={0x9, 0x7, {r9}, {0xee01}, 0xffffffff00000001, 0x7}) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f0000000a80)={r10, 0xffff, 0x0, 0x0, r11}) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 3, 3, 2, 2, 24, 6, 30, 3, 4, 18, 30, 10] detailed listing: executing program 3: syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000001980)=[{0x1, 0x811, 0x0, 0x0}, {0x9, 0x5401, 0xc1, &(0x7f0000000680)="a4337d15c1662487935f3152ffd6d1f0e4401a2a990791b05f5522a52584b4acef31f52d61919fe3e76df4b8b1eaf6b5da9b96a1d8a326ca5795eac38b4166bce148e3c645243486649602b4bd920f7ce57dfdc76f6566f2661c858db3039dee80d8727e79481aed812f870cea584ef520be0201caf84624867cc18e67c37ca6537345c1400fdb2e0f7041389d736e0650d2e42a9daf7721f4c44ccb1ed3befc85209b69bb640fa3ac30f3d1a08d34913225b82daa766a58756c6ed54c77bf876d"}, {0x9, 0x0, 0x0, 0x0}], 0x3}) executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'ip6_vti0\x00'}) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x40, @empty, @local, {[], @dest_unreach={0x1, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x1c, 0x4, 0x40, @empty, @empty, [], "4500001c0000ffff"}}}}}}}, 0x0) executing program 2: syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109023800010000000009043200019740a400052406000105240000000d240f0109000000020009004e06241a00b51409058203ff"], 0x0) r0 = syz_usb_connect$midi(0x6, 0x8a, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x30df, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x1, 0x1, 0x36, 0xc0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x30, 0xee, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x55, 0xe}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x23}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x5, 0xf1}], [{{0x9, 0x5, 0x8, 0x0, 0x200, 0x1d, 0x7, 0xff, {0x12, 0x25, 0x1, 0xe, "b2b8f030da83abd993e945e4b4c0"}}}, {{0x9, 0x5, 0x0, 0xf, 0x20, 0x81, 0x0, 0x5e, {0x10, 0x25, 0x1, 0xc, "3ac666f4659c178c5a7ff023"}}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0xe, 0x81, 0x6, {0x10, 0x25, 0x1, 0xc, "70bf8eae3eba40009ca495c1"}}}]}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x2, 0x5, 0x3, 0x20, 0xff}, 0xc, &(0x7f0000000100)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0xf, 0x67a}]}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000000)) executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x3c}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1b00}, {0x3}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x48080) executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000800)='syzkaller\x00', 0x4, 0xff5, &(0x7f0000000840)=""/4085, 0x40000000}, 0x94) executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad10102030109022400010000"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_disconnect(r2) syz_open_dev$evdev(&(0x7f0000000340), 0x3e, 0x202444) r3 = syz_usb_connect$cdc_ecm(0x5, 0x5e, &(0x7f0000000380)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x9e594254eba08ff8, 0x2d, &(0x7f00000003c0)=ANY=[], 0x0) syz_usb_disconnect(r3) executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4442, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0xbdcb}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x224, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x1bf, 0x33, @mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xe}, @broadcast, @device_a, @random="29cd1b0efd0f", {0x1, 0xfc}}, 0x2000, 0x5, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0xcf, "2689dbaf9eddac828792c79bbbffc207b95a3baba0ae69794b363c353632c45f3af7e85f9da38c6b8d68f768f3bc6b993b215fc2bfdce4160fc043a176363e973c4c2c55b87bc1798367a58cca8c0885aedad01abb49e5131e592907c3e9b34b859be543c3d72b83d5f9675bcd177ad7ce41954ae0e3baaacd3bd73010b62b338d955a536975cadf647e0e1e06c1c00393e09b2762b2da9e07bdd3dd2d53d41132586f0451b11fee7ae278c46b493aa72f510ee0c1066ccb4eef85750bb43439fcc16013585ba3b660b86f2f07a5b8"}, {0xdd, 0x37, "198ef4264fcad6a40da4347352af2b7c1fb199bac62c768d68f09c3548ccf247a1ad59ed65fee0a1efc3fc30d55ba80d19a0106095f8e5"}, {0xdd, 0x8b, "0c6ac7ff9aee9d587d05d52ea68c912807652b9caa8f506597e61ce201fa5da98068112f0cdaf30073060a424c7643f735807f55fd9003e7b3e8f1a12a2b3642b8b279cc47b539846d7c48c2ba469bff80ae938126ee5429162eaac2390d36fd3ccb493b85efd7a9fb52a0ff7ba0ce6165a461cf21d9410f502a62974c25c9ab1f604c3b4cbff22a11328e"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x224}, 0x1, 0x0, 0x0, 0x4040}, 0x4801) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f00000003c0)={0x6, 0x3, 0x1}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000400)=0xffff) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000480)={0x5, 0x20, [0x3, 0x688, 0x9f2, 0x4], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000004c0), 0x100) write$6lowpan_enable(r3, &(0x7f0000000500)='0', 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x6ce00, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r4, 0x8010aebc, &(0x7f0000000680)={0x80a0000, 0xc000}) r5 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)="2a13e1258fb15379be6602669c61557354cc35ac3d4ecb60939db8b463ae711a6731a999a20ed185182122c689858c65c6a0038d37ccbe190e63f85f4f74300ee5e841dcb8ed391f806000553cac5081347b59e69e2a95b29e658fb201b41b569178b8480131294cafafa11fc1c3dc8cdbbfb8c460d006556b8dbdfeb9dd", 0x7e}], 0x1, 0x0, 0x0, 0xc890}, 0x24040045) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000800)=0x7fff, 0x4) socket(0x9, 0x2, 0xff) r6 = syz_create_resource$futex(&(0x7f0000000840)=0x1) r7 = syz_create_resource$futex(&(0x7f00000008c0)=0x1) futex(r6, 0x1, 0x1, &(0x7f0000000880)={0x0, 0x3938700}, r7, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000900)={0x5, 0xffffffffffffffff, 0x1}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000940)=0x0) mq_notify(r1, &(0x7f0000000980)={0x0, 0xd, 0x0, @tid=r9}) socket$kcm(0x29, 0xd, 0x0) ioctl$UBLK_U_CMD_STOP_DEV(r1, 0xc0207507, &(0x7f00000009c0)={0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000a40)={0x9, 0x7, {r9}, {0xee01}, 0xffffffff00000001, 0x7}) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f0000000a80)={r10, 0xffff, 0x0, 0x0, r11}) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program did not crash bisect: testing without sub-chunk 3/3 testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 27, 30, 5, 28, 30, 2, 30, 14, 18, 2, 21, 10] detailed listing: executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000340)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000f80)={0x0, 0x1c, &(0x7f0000000fc0)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f0000001000)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000001040)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(r1, 0x84, 0x7d, &(0x7f00000010c0)={r3, 0x3}, 0x8) executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newtfilter={0x490, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x460, 0x2, [@TCA_ROUTE4_POLICE={0x454, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x8, 0xb, 0x200, 0x3, 0x8, 0x665, 0x4, 0x5, 0x34, 0x6, 0xa233, 0x62, 0xad, 0x3, 0x80000001, 0x5, 0x2, 0x6, 0xd906, 0x0, 0x8, 0x80000000, 0x1c7, 0x9, 0x7, 0xf, 0x7fffffff, 0x0, 0x515a, 0xa4, 0x2, 0x8, 0x8, 0x0, 0x100, 0x6, 0x78, 0x8000, 0x5, 0x5, 0x9, 0x2, 0x7, 0xa0, 0x4, 0x5, 0x8, 0x2, 0x7, 0x1000, 0xfff, 0x141, 0x9f, 0x1, 0x37ac, 0x3, 0x2, 0x5, 0x401, 0xe386, 0x0, 0x0, 0x3ff, 0xfffffffe, 0x5, 0x2, 0x6, 0x9, 0x80, 0x60, 0x6ffd, 0x2, 0x5d33759a, 0x7, 0x2, 0x4, 0x7, 0x3, 0x3, 0xdcb, 0x401, 0x5, 0x3, 0xe, 0xfffffff8, 0x5, 0x9, 0x7f, 0x4, 0xd, 0x6, 0x0, 0x1, 0x3, 0x7000, 0x4, 0x7, 0x1, 0x9, 0x2, 0xc6e0340, 0x4, 0x401, 0x15, 0x101, 0x4, 0x7, 0x3ff, 0x398e, 0x2, 0x10, 0x7, 0x0, 0xc, 0x1588cdd2, 0x11be, 0xffff, 0x2ac, 0x5, 0x3, 0x3, 0xfd, 0x4, 0x4, 0x9, 0x0, 0x8, 0x6, 0x6, 0x9, 0x3553, 0x5, 0x9, 0x6, 0x8001, 0x1, 0xffff, 0x6, 0x0, 0x5, 0x40000000, 0x6, 0x4, 0x0, 0x5, 0x7, 0xe, 0x5cb7, 0x5, 0x11561d4e, 0x5, 0x5, 0xffffff80, 0x4, 0x2, 0x5, 0x3, 0xffffffff, 0x101, 0xef, 0x6, 0xa, 0x6d37, 0x7fffffff, 0x8000, 0x7fffffff, 0x80000001, 0xaba5, 0x1, 0x7, 0x5, 0xa3e0, 0x5f, 0x3, 0x9, 0x80000000, 0x1, 0x81, 0x9, 0x800, 0x0, 0x2ced, 0x10, 0x8001, 0x5, 0x7, 0x100, 0x1, 0x4, 0xe, 0xfffffff9, 0xffffffff, 0x2, 0x4, 0xb4, 0x9, 0x0, 0xdf3c, 0x4, 0x6, 0x4905, 0x3, 0x3ff, 0x3, 0xcace, 0x200, 0xc5c, 0xfffffff8, 0x9, 0x3, 0x3ff, 0x0, 0x100, 0x3, 0xb, 0x4b73, 0xfffffff9, 0xffff, 0x55d, 0xff, 0xc, 0xffffdfff, 0x4, 0xfffffff8, 0x4, 0x1, 0x4, 0xa, 0x55d0, 0x8, 0x2, 0x0, 0x307, 0x7fffffff, 0x3, 0x5c18, 0x2, 0x8, 0x2, 0xb, 0x5, 0x100, 0x6, 0xc, 0x8, 0x1000, 0x3, 0x2, 0x0, 0x800, 0x4, 0xa, 0xfff, 0x8000, 0x381]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0xad}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa2e}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x2}]}}]}, 0x490}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x400) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0xe) r1 = open(&(0x7f00000005c0)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f0000000600)={0x1, 0x3, 0x2, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x200) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000740)={0x1, &(0x7f0000000780)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x6c28c0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x7b) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000bcb2a43c9bf84dade0acb18e63bc7c6763cf785ca6e2c1ba2d70d7c9ffb664cb94e71b2f59e046afcade085c5652a58fbfb7895820cccf156bfdb1bb515cb73b777ad9dc2f1e2f6cdd50a9e2571794d7a056b7f771", @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0xd, &(0x7f0000000980)=ANY=[], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r4, 0x0, 0xe, 0xe, &(0x7f0000000a80)='\x00'/14, &(0x7f0000000ac0)=""/14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={0x0}}, 0x8040) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000b80)={'bridge0\x00'}) syz_mount_image$fuse(0x0, &(0x7f0000000bc0)='./file0/file0\x00', 0x18001, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) syz_open_dev$usbmon(&(0x7f0000000d00), 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000d40)={0x3, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="0203000210000000fbff0000000000000200080008000000660000000000000005000600000000000a000000000000000000000000000000000000000000000101000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8000000000000000000000000000aa0000000000000000"], 0x80}, 0x1, 0x7}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000e40)={0x2020}, 0x2020) executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000002, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7e, &(0x7f0000000100)={0x0, 0x8690, 0x40, 0x6, 0x20002f6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x50) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000200)=0xf3b, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000004c0)=0x2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) getsockopt$inet_sctp_SCTP_ASCONF_SUPPORTED(r4, 0x84, 0x80, &(0x7f0000001c80)={0x2}, &(0x7f0000001cc0)=0x8) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000500)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000001d00)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) bind$tipc(r6, &(0x7f0000001d40)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000001d80)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000001dc0)={0x42, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r5, &(0x7f0000000a00)='q', 0x5e0, 0x881, &(0x7f0000000a40)={0x11, 0x8100, r7, 0x1, 0x87, 0x6, @broadcast}, 0x14) io_uring_enter(r1, 0x6c7e, 0xa5a, 0x16, 0x0, 0xfffffffffffffda3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_emit_ethernet(0x35, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180c20000000200000000010027424203"], 0x0) syz_emit_ethernet(0x35, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c2000000020000000001602742420300"], 0x0) executing program 5: r0 = memfd_create(&(0x7f0000000540)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000580)="4fbbd1479f07edd315133cfaee3b43c23a0dd466b5222ff79d8f", 0x1a) sendfile(r0, r0, &(0x7f00000005c0), 0xffff) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = open_tree(0xffffffffffffffff, 0x0, 0x900) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r3, 0x0, 0x0, 0x4}, 0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x1000, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x80, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) truncate(&(0x7f00000007c0)='./file0\x00', 0x100000005) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x94) write$dsp(r2, &(0x7f0000000080)='\\', 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000840)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newlink={0x44, 0x10, 0x401, 0xfffffffa, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1705, 0x204ee9f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000980)={r7, @broadcast, @local}, 0xc) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000180)=0x2) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f00000002c0)={0xa3, 0xd, 0x4, 0xfe, 0xe0, 0xfeff, 0x0}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, &(0x7f0000000200)={0x1, 0x3, 0xffff5f11, 0xfffd, 0x6b78, 0xc, 0x40ff, 0x1fa, 0x4a, 0x28, 0xfffffff9, 0x2}) close_range(r1, 0xffffffffffffffff, 0x0) r10 = open_tree(r3, &(0x7f0000000480)='./file0\x00', 0x100) ioctl$XFS_IOC_COMMIT_RANGE(r2, 0x40585883, &(0x7f00000004c0)={r10, 0x0, 0xef8, 0x7, 0xe0, 0x4, [0x3, 0x15363e5b, 0x3, 0x401, 0x8f0, 0x4]}) executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) (async) r0 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000001500)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0x7f, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000001780)={0x0, "7f7acb036ad32033e27c8a2de7608e32d0a00f79d7103e9558e81ef72464f27ceb521b96ede4b47bbcf13ea0ae57ec7becb27b8c429108adc2ae6ff315b1be23", {0x572, 0x6}}) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000001980)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0xc182, 0x8001, 0x8, 0x5, 0xfffffffffffffffe, 0xfffffff9}) (async, rerun: 64) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) (async, rerun: 32) sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x7) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) (async, rerun: 64) recvmmsg(r2, &(0x7f0000002a00)=[{{&(0x7f0000000140)=@nl, 0x80, &(0x7f0000000bc0), 0x0, &(0x7f0000000c00)}, 0x3}, {{&(0x7f0000000c40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000000)=""/68, 0x44}, 0x3}, {{&(0x7f0000000e80)=@l2, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000001140)=""/253, 0xfd}, 0x40}, {{&(0x7f0000001240)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f00000012c0)=""/44, 0x2c}, {&(0x7f0000001300)=""/81, 0x51}], 0x2}, 0x1ff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/106, 0x6a}}, {{&(0x7f0000001900)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000080)}, 0xe865}], 0x6, 0x40012002, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0xffffffffffffff50, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20008040) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xe0d9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) r4 = syz_open_dev$usbfs(&(0x7f00000005c0), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000001840)) (async) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000001880)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f00000018c0)=0x1) (async, rerun: 32) syz_emit_ethernet(0x5f, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428e916293afffe880000000000000000000000008001ff0200000000000000000000000000018900907800000000fe8800000000000000000000000000011f02d462daf76d13b82ce3b95fcce69e43"], 0x0) (rerun: 32) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x18) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x2, 0x40, 0xfffffff7, 0x9, 0x0, [{0x0, 0x3, 0x7, '\x00', 0x2}, {0xb7, 0x9, 0x5, '\x00', 0x9}, {0x2c, 0x0, 0x0, '\x00', 0x8}, {0x3, 0x5, 0xff, '\x00', 0x5}, {0x6c, 0x6, 0xc, '\x00', 0x3}, {0x5, 0x3, 0x1, '\x00', 0x1}, {0x88, 0x8, 0x1d, '\x00', 0x8}, {0x1, 0x70, 0xb, '\x00', 0xa2}, {0x2, 0x6, 0x0, '\x00', 0x3}, {0x4, 0xd, 0x88, '\x00', 0x79}, {0xc, 0xd5, 0x3, '\x00', 0x1}, {0x2, 0x0, 0x1, '\x00', 0x7}, {0x80, 0x1, 0x9, '\x00', 0x1}, {0x81, 0x3, 0x8, '\x00', 0x2}, {0x3, 0xf7, 0x5, '\x00', 0xb}, {0xe, 0x2, 0x80, '\x00', 0x3}, {0x5, 0xd3, 0x15, '\x00', 0xa}, {0xff, 0x7f, 0x2c, '\x00', 0xa}, {0x2, 0x6, 0x1, '\x00', 0xe}, {0x9, 0x10, 0xce, '\x00', 0x5}, {0x8, 0xfc, 0x5, '\x00', 0x8}, {0x2, 0x14, 0xe, '\x00', 0xa}, {0xb, 0x1, 0x10, '\x00', 0x1}, {0x1, 0x3, 0x4, '\x00', 0xd}]}}) executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000e40)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000001100007802"], &(0x7f0000000e80)=0x2a0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x1) fsmount(r1, 0x0, 0xa) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'lo\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000300)=0x0) r8 = eventfd2(0x3, 0x80000) io_pgetevents(r7, 0x2, 0x0, &(0x7f0000000340), 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000380)=[&(0x7f0000000680)={0x1802, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, r8}]) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_destroy(r7) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x2, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xfff2}, {0x2}}}, 0x24}}, 0x0) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r2, &(0x7f0000000140)={0x6000000d}) sched_setscheduler(0x0, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0x0, &(0x7f00000003c0)={0x8, 0x110008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) unshare(0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) socket$unix(0x1, 0x1, 0x0) executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000540)=0x11) readv(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/180, 0xb4}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utimes(&(0x7f00000004c0)='./file0\x00', 0x0) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000080)) r3 = open(&(0x7f0000000040)='.\x00', 0x80080, 0x20) linkat(r3, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) openat$cgroup_int(r3, &(0x7f00000003c0)='cgroup.clone_children\x00', 0x2, 0x0) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010028a6704cdbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008000d000100000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000302040008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = accept4$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10, 0x80800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) r5 = fanotify_init(0x2, 0x101000) pipe(&(0x7f0000000140)={0xffffffffffffffff}) fanotify_mark(r5, 0x1, 0x4800001e, r6, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000002680)={0x50, 0x0, r8, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x5}}, 0x50) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0xc0202, 0x0) writev(r11, &(0x7f0000000380)=[{&(0x7f00000003c0)="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", 0x200}, {0x0, 0x20000}], 0x2) syz_fuse_handle_req(r7, &(0x7f0000002700)="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", 0x2000, &(0x7f0000004700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000047c0)={0x90, 0x0, 0x7fffe, {0x5, 0xfffffffffffffff9, 0x7fff, 0x4, 0x0, 0x2, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffff, 0x1, 0xc000, 0x0, r9, r10, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000004880)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0x30, 0x4e21, 0x0, 0xa, 0xa0, 0x20, 0xbd, r4, r9}, {0xffff, 0x100, 0x100000001, 0x6, 0x4, 0xfffffffffffffffe, 0x100000001, 0x6}, {0x9, 0x6, 0x7, 0x4}, 0x1, 0x6e6bbc, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0xff}, 0xf, @in=@rand_addr=0x64010102, 0x0, 0x1, 0x1, 0xb, 0x9, 0x0, 0x2}}, 0xe8) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c000000030101010000000000000000020000000c001980080002000d0800003c0002802c0001"], 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x22020600) r0 = socket(0x2d, 0x2, 0x0) connect$netlink(r0, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x8}, 0xc) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="1c0000001a009b8a140000003b9b301f000000f40000000000000000", 0x1c) recvmmsg(r1, &(0x7f00000000c0), 0x400000000000ec0, 0x2, &(0x7f0000000100)={0x77359400}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program did not crash bisect: split chunks (needed=true): <12>, <12> bisect: split chunk #0 of len 12 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 30, 14, 18, 2, 21, 4, 3, 3, 2, 2, 24, 6, 30, 3, 4, 18, 30, 10] detailed listing: executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000e40)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000001100007802"], &(0x7f0000000e80)=0x2a0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x1) fsmount(r1, 0x0, 0xa) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'lo\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000300)=0x0) r8 = eventfd2(0x3, 0x80000) io_pgetevents(r7, 0x2, 0x0, &(0x7f0000000340), 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000380)=[&(0x7f0000000680)={0x1802, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, r8}]) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_destroy(r7) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x2, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xfff2}, {0x2}}}, 0x24}}, 0x0) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r2, &(0x7f0000000140)={0x6000000d}) sched_setscheduler(0x0, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0x0, &(0x7f00000003c0)={0x8, 0x110008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) unshare(0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) socket$unix(0x1, 0x1, 0x0) executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000540)=0x11) readv(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/180, 0xb4}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utimes(&(0x7f00000004c0)='./file0\x00', 0x0) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000080)) r3 = open(&(0x7f0000000040)='.\x00', 0x80080, 0x20) linkat(r3, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) openat$cgroup_int(r3, &(0x7f00000003c0)='cgroup.clone_children\x00', 0x2, 0x0) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010028a6704cdbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008000d000100000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000302040008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = accept4$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10, 0x80800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) r5 = fanotify_init(0x2, 0x101000) pipe(&(0x7f0000000140)={0xffffffffffffffff}) fanotify_mark(r5, 0x1, 0x4800001e, r6, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000002680)={0x50, 0x0, r8, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x5}}, 0x50) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0xc0202, 0x0) writev(r11, &(0x7f0000000380)=[{&(0x7f00000003c0)="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", 0x200}, {0x0, 0x20000}], 0x2) syz_fuse_handle_req(r7, &(0x7f0000002700)="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", 0x2000, &(0x7f0000004700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000047c0)={0x90, 0x0, 0x7fffe, {0x5, 0xfffffffffffffff9, 0x7fff, 0x4, 0x0, 0x2, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffff, 0x1, 0xc000, 0x0, r9, r10, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000004880)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0x30, 0x4e21, 0x0, 0xa, 0xa0, 0x20, 0xbd, r4, r9}, {0xffff, 0x100, 0x100000001, 0x6, 0x4, 0xfffffffffffffffe, 0x100000001, 0x6}, {0x9, 0x6, 0x7, 0x4}, 0x1, 0x6e6bbc, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0xff}, 0xf, @in=@rand_addr=0x64010102, 0x0, 0x1, 0x1, 0xb, 0x9, 0x0, 0x2}}, 0xe8) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c000000030101010000000000000000020000000c001980080002000d0800003c0002802c0001"], 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x22020600) r0 = socket(0x2d, 0x2, 0x0) connect$netlink(r0, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x8}, 0xc) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="1c0000001a009b8a140000003b9b301f000000f40000000000000000", 0x1c) recvmmsg(r1, &(0x7f00000000c0), 0x400000000000ec0, 0x2, &(0x7f0000000100)={0x77359400}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) executing program 3: syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000001980)=[{0x1, 0x811, 0x0, 0x0}, {0x9, 0x5401, 0xc1, &(0x7f0000000680)="a4337d15c1662487935f3152ffd6d1f0e4401a2a990791b05f5522a52584b4acef31f52d61919fe3e76df4b8b1eaf6b5da9b96a1d8a326ca5795eac38b4166bce148e3c645243486649602b4bd920f7ce57dfdc76f6566f2661c858db3039dee80d8727e79481aed812f870cea584ef520be0201caf84624867cc18e67c37ca6537345c1400fdb2e0f7041389d736e0650d2e42a9daf7721f4c44ccb1ed3befc85209b69bb640fa3ac30f3d1a08d34913225b82daa766a58756c6ed54c77bf876d"}, {0x9, 0x0, 0x0, 0x0}], 0x3}) executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'ip6_vti0\x00'}) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x40, @empty, @local, {[], @dest_unreach={0x1, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x1c, 0x4, 0x40, @empty, @empty, [], "4500001c0000ffff"}}}}}}}, 0x0) executing program 2: syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109023800010000000009043200019740a400052406000105240000000d240f0109000000020009004e06241a00b51409058203ff"], 0x0) r0 = syz_usb_connect$midi(0x6, 0x8a, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x30df, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x1, 0x1, 0x36, 0xc0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x30, 0xee, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x55, 0xe}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x23}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x5, 0xf1}], [{{0x9, 0x5, 0x8, 0x0, 0x200, 0x1d, 0x7, 0xff, {0x12, 0x25, 0x1, 0xe, "b2b8f030da83abd993e945e4b4c0"}}}, {{0x9, 0x5, 0x0, 0xf, 0x20, 0x81, 0x0, 0x5e, {0x10, 0x25, 0x1, 0xc, "3ac666f4659c178c5a7ff023"}}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0xe, 0x81, 0x6, {0x10, 0x25, 0x1, 0xc, "70bf8eae3eba40009ca495c1"}}}]}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x2, 0x5, 0x3, 0x20, 0xff}, 0xc, &(0x7f0000000100)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0xf, 0x67a}]}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000000)) executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x3c}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1b00}, {0x3}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x48080) executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000800)='syzkaller\x00', 0x4, 0xff5, &(0x7f0000000840)=""/4085, 0x40000000}, 0x94) executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad10102030109022400010000"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_disconnect(r2) syz_open_dev$evdev(&(0x7f0000000340), 0x3e, 0x202444) r3 = syz_usb_connect$cdc_ecm(0x5, 0x5e, &(0x7f0000000380)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x9e594254eba08ff8, 0x2d, &(0x7f00000003c0)=ANY=[], 0x0) syz_usb_disconnect(r3) executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4442, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0xbdcb}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x224, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x1bf, 0x33, @mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xe}, @broadcast, @device_a, @random="29cd1b0efd0f", {0x1, 0xfc}}, 0x2000, 0x5, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0xcf, "2689dbaf9eddac828792c79bbbffc207b95a3baba0ae69794b363c353632c45f3af7e85f9da38c6b8d68f768f3bc6b993b215fc2bfdce4160fc043a176363e973c4c2c55b87bc1798367a58cca8c0885aedad01abb49e5131e592907c3e9b34b859be543c3d72b83d5f9675bcd177ad7ce41954ae0e3baaacd3bd73010b62b338d955a536975cadf647e0e1e06c1c00393e09b2762b2da9e07bdd3dd2d53d41132586f0451b11fee7ae278c46b493aa72f510ee0c1066ccb4eef85750bb43439fcc16013585ba3b660b86f2f07a5b8"}, {0xdd, 0x37, "198ef4264fcad6a40da4347352af2b7c1fb199bac62c768d68f09c3548ccf247a1ad59ed65fee0a1efc3fc30d55ba80d19a0106095f8e5"}, {0xdd, 0x8b, "0c6ac7ff9aee9d587d05d52ea68c912807652b9caa8f506597e61ce201fa5da98068112f0cdaf30073060a424c7643f735807f55fd9003e7b3e8f1a12a2b3642b8b279cc47b539846d7c48c2ba469bff80ae938126ee5429162eaac2390d36fd3ccb493b85efd7a9fb52a0ff7ba0ce6165a461cf21d9410f502a62974c25c9ab1f604c3b4cbff22a11328e"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x224}, 0x1, 0x0, 0x0, 0x4040}, 0x4801) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f00000003c0)={0x6, 0x3, 0x1}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000400)=0xffff) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000480)={0x5, 0x20, [0x3, 0x688, 0x9f2, 0x4], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000004c0), 0x100) write$6lowpan_enable(r3, &(0x7f0000000500)='0', 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x6ce00, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r4, 0x8010aebc, &(0x7f0000000680)={0x80a0000, 0xc000}) r5 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)="2a13e1258fb15379be6602669c61557354cc35ac3d4ecb60939db8b463ae711a6731a999a20ed185182122c689858c65c6a0038d37ccbe190e63f85f4f74300ee5e841dcb8ed391f806000553cac5081347b59e69e2a95b29e658fb201b41b569178b8480131294cafafa11fc1c3dc8cdbbfb8c460d006556b8dbdfeb9dd", 0x7e}], 0x1, 0x0, 0x0, 0xc890}, 0x24040045) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000800)=0x7fff, 0x4) socket(0x9, 0x2, 0xff) r6 = syz_create_resource$futex(&(0x7f0000000840)=0x1) r7 = syz_create_resource$futex(&(0x7f00000008c0)=0x1) futex(r6, 0x1, 0x1, &(0x7f0000000880)={0x0, 0x3938700}, r7, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000900)={0x5, 0xffffffffffffffff, 0x1}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000940)=0x0) mq_notify(r1, &(0x7f0000000980)={0x0, 0xd, 0x0, @tid=r9}) socket$kcm(0x29, 0xd, 0x0) ioctl$UBLK_U_CMD_STOP_DEV(r1, 0xc0207507, &(0x7f00000009c0)={0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000a40)={0x9, 0x7, {r9}, {0xee01}, 0xffffffff00000001, 0x7}) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f0000000a80)={r10, 0xffff, 0x0, 0x0, r11}) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 12 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 30, 14, 18, 2, 21, 6, 30, 3, 4, 18, 30, 10] detailed listing: executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000e40)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000001100007802"], &(0x7f0000000e80)=0x2a0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x1) fsmount(r1, 0x0, 0xa) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'lo\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000300)=0x0) r8 = eventfd2(0x3, 0x80000) io_pgetevents(r7, 0x2, 0x0, &(0x7f0000000340), 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000380)=[&(0x7f0000000680)={0x1802, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, r8}]) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_destroy(r7) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x2, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xfff2}, {0x2}}}, 0x24}}, 0x0) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r2, &(0x7f0000000140)={0x6000000d}) sched_setscheduler(0x0, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0x0, &(0x7f00000003c0)={0x8, 0x110008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) unshare(0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) socket$unix(0x1, 0x1, 0x0) executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000540)=0x11) readv(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/180, 0xb4}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utimes(&(0x7f00000004c0)='./file0\x00', 0x0) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000080)) r3 = open(&(0x7f0000000040)='.\x00', 0x80080, 0x20) linkat(r3, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) openat$cgroup_int(r3, &(0x7f00000003c0)='cgroup.clone_children\x00', 0x2, 0x0) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010028a6704cdbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008000d000100000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000302040008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = accept4$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10, 0x80800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) r5 = fanotify_init(0x2, 0x101000) pipe(&(0x7f0000000140)={0xffffffffffffffff}) fanotify_mark(r5, 0x1, 0x4800001e, r6, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000002680)={0x50, 0x0, r8, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x5}}, 0x50) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0xc0202, 0x0) writev(r11, &(0x7f0000000380)=[{&(0x7f00000003c0)="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", 0x200}, {0x0, 0x20000}], 0x2) syz_fuse_handle_req(r7, &(0x7f0000002700)="cab1f92d585917232bcfa47f91900c936355a83b5a41f6f43bd8b0d1a1e13674b6a8596a8376e6851e0b96decd071d92ce4887ddad2b82183858d82c7d11948024607d92ec0f1c23a4e755f29fa557d1353a3ced680f530e822eed64b4d1aaf20d1320f3583cadb9dfde95993487f96bc290dc10cfccc5ec8ea864590fc1678b79b0a36c9668b27ae142d22c305496881af0d0546076ec21e31bdab2465010e779e7140036d2b12f59b971792cfed8d07f0b8ae13ee944268f573ec11c1b14d53880a64fd2fdbe981f4d9af8863191efc03a39d5a3f19badf65dd49443297b38bf0c009eafad5879cb78e63b00e961de7d7180941f0d1e87a2635294bcb4619e9d84be1816784325d23fcb9c66388b586c8e719f3edfa2aa37cc3f6511add854c10fe546d1c11f11eeaff24cecc0d47ec8fd336ec08470f06227e4a9410074a3d715eb6a697b04bdfeda0b6753d880d012ef8fada7f4ed649ca214609e31cace9a33937813012e4c1b787d8f71ce9b495a69e5c8810ff9954b7b96743dcdd7e52ebbf526f339d3c8ad2550326d3a396de5ac90787b352feabe013c4044ca813344c97f836851d6daf2de3a8b07a61d1052bd302a641706af7629a042dc2f0374671b287f1325763e1818beba9f7cab9e25d6f8749f7dea4c5ef684723d33938aca32e19b1c6a6237d899fb397e9023764b3f4d6399885533a802e4d3ca76f2e0234ed6d7257f8cebddc900af88cc21ee2816513045e92f71fc8523894d684678f17b5fdb4adeda98fc019c0ba05efeffeff3bbda1d6d84a98002a74237cb8d13cb30d8a9a7e47e4da8273a47df4e6ea53036b5b154b9597e6eb00fcad29ed04a820b1ce807bf1818344122a6f0aac52d24426feeba0af56925cb4a1e70a84251f2b4d4693e689518a0e159647b5b60a62db699a25275520c208652ce4401bb5dcd633e7c889758d3d213f4dbe69c9bb76e80b6e892bb5f5809e042ee5cb1982a2373b1886711d1e68d0bc3d4c9d69ac605432bf84cd81104e77c71cd7c0708244fc9428edd52f8cc8f3023b4c6d3bbad7a9b874111098c4652b34c428a8f789c5e5f3f84354ab7afec1a7b11d2a34771ebad2f15c169a61b431c8a1cca9ca1596fce65242d03814ebf977da9bbde5707b22b5002cce68bd0f6d196df341c96bd0cf0916b8775e75021663ea82c99a90b844cc5f8b6c56b21b1fbbbf6fb40ed0c29ee4ecc2998df2cbe3a4d75025ef73dd9f3aa5bc7aa694fe573a73453c9ff873d0a8840afd91be319181836de45260b4e252394edae58f840858a9b64f0ff37bb1820031e563250e62ceea5a7c4d2cd4d5d10e57176fcf576e774920db06b36ea02f9cae9c1087bd1866fb4bcf7fbf393093b339860a61c61248000a2a1bbc982fa691e311fa1bf2a38afdf08b574eed0df42bdc30c3db7cdcb71687f48070077f91fef93e8e47e248d3e53e8a79fcb5a8f8aa39b3bfa2dd88d5c5840d517ae8c132d423a37a8be3301d62a99753bc72f674205a11850e045430abbdc4e68223a93c76d6d2f1d646af10a15705793e2fc5a532af3dda88f52063a091f1f79cd5a5b23ea7742b149eab1aa43c21c2f15227a1f94b5580adbb1e1c49ade49d6e8b838cff43aa2426651817f479252c8ef7af9e4a5ad33839be6c15b50016c59f13c26cfca796cfc01207acc69e9d3952f6e71c975bc77d5a001f6f6c044770f54d86a4518a4898e3136988d643dd2de907859f0b4d4de2a2d461ba5e05cff49eda86772799b2e7947fdbb89fc5b0347e87f1b9dbb94842cc1457d07f3e0c41342510f5ccb551cdf0fcac1a758041bff75812de1b2abf341ed5f667c9b0581d2c33e0b17f1b46c2287399c62252edb9c1cf2b80b7a1b4c3c903aa4cf5332a2998b9072f61f589ae5df1168f8d18e98fce2bec1d5d876f9757017b73495a4e8f4f2423cde8875aa8c95a9ce180cac6690657b8a70e5541d5ef46575cd74e063759fe4889f4d9737a6c9732f8b7f7836508814093b9bdac5733938e761b3642910d4df0b646c1b9583a502246988e9ab78de3d011e8590e48eadfcdb70c8aad6dfbe1dbd3ef20d9ba393db4e6cf91e3bb4e84883c60dc20ed974a5decde12d3c5a1c9a00999f8eefc244465f518425820b9713cbfc6027f427b9cd8756edec5b3a0301a01ebb12c6d412ee3422aeb8b291619f62f4ce41511156f73e54b5097051ea777af7cb73b36e1274ce1a3892007466cc793eb0515b8984acb99c04c7eaa51e175bd73d99bc0c67c8ea84d808a7906a6ad330ba2c9651b2ab82d0781a969873dcddb068c15b7899fd560a1c3d44b34e81cce079c46fd86522052659e2c3151c79a8ccab1dfcdb91f53ca067ea1b2aa507278e4166e817eb0d7dea67cde1598a1bdb76a8caf82add2b43fdd10bf80b0d2f32365849c425d6ac3d2d88a76378d23961eb96c8422e785ea61f33e4daec02393d51f44b177755749fe84b43f5246d20177800af05752af524265f34f62bd5167fa647d2118aa905a1af53f07e7447bee29675cc23f547339af140c0818aa974ca16da33e767d508e4f56726c7076acce57a9957d08348ef84a39188e800ca44682fccaa9ee1b42e1aaf7738dced1dce3ef2dadfcba2863f36b5f8080ed22539b5176bc2c57e52e4cfde659c1ce9e179c79f85d60ca51c7453dad593190b19a1be8f5c5b0249d70079f10f9d0f07f25a98bd95e6e6f71101842b55347ee008d58522e8f7598c1636c58fd20984a6bb17fd47e7db4bc72854054e7900cac4174cf0b4eda2406842955fd8a2ba00ea4d490dbbab02d659cea4f932d9ee37c8f35daa4740b3273693ee2c1b00965a79d18ad98ae92bf2e1ea84ff1e6181937d38765cb353c6223ead1257d88a8844cb0be17aecc2dd56b78dcd6e2999fe695db248dd68275a5ad0f223a4629b17a040a766b2bd2376d77a422375de14a3daaf4fee92f23ca831452826bc66d0cee2049acbde07bdbb6ce228147f9ed4f9437301e8ca9e1ace0684700e9623a1534212d4c557712a3196d86c86077e97172d7e89436e95e1d7e7629d5bc908e346e504839498890210ca15bea51bb2840f1275d36b99490ff0706aa3ca9e89f33fd99df863acc3bca504c15501ba9d987999ee118f47b7737d2dfe73ab257d680f983da1f5fd5975491ad966989f7b15e76e4e6b1a2987801adb3b7cd4cb1d2c9d0454429c2955643c8fb82ccf8e93051cc10081f8181af0d143deee686f67ec42db1e9914ed047e4bf0006af01028e3839451fa3e17d33586022c63cafaf6d0fc773c96143473316988d32f9943d7477604a27ae4b8a7093bee2cefe10cc02109c748d0676692a2411e5c3b4c4c1b9ac7f9b71a1a7126dacf4615e8c9c3d38f536e8b32e37f406b3dc44db80a00d6e423deec869edb32a411986be1517b6ea45e1f984a6fbd08edb25a305122fe5a90cc46af48ebc36433a1f27f43d85492ea60fd2f43125e7328da93f7aad97f97910112fed7ae7b1785822356a525df1f3ab4637b68d92ecd8d7f234973c686fb11821bb1de5f8459b57892f1dae08aae1924ee60a904d7be6e6611ec3d00002152ab7e0c29c7bf124dbec9a6eff25e619d89c27d187e3ffff63c996c33f4b7e967b607f36a8ac8dba6beb43395c9c9b2e3e36de29b07f9c2d60cdfd1d02813d4e508c56b99405b752758a01cc25bb5436ea1efd52c536fa1d2fb1cd9b1ee006d42b58600be2c1aba59c480cb6e9224d7a4df920598950634033087d3e356f35cd2f8b021d30f4ba79bc60eb6715c6c9bed84648552395cffa97c8cdb8f562f8f127f0e6f86dc61fab11ff782560d88cf2872d0e07a27f38120a0831a93c377298c2ed4fe180eb078422e5f030540fd21ebd414e6c42f1fa5491b5b8fdcada476376732edbfd66e10a475e2c0a43ccf6a41f7879f4577e987695d8d5097f6920fbe2b9ac2cb424de7afded1b5b7db89f3612c487770d58a7bb7517f1fa7a98ff6db3778d40c5f36b27d233a0c18587220f900f4a8e867e33e24c1981acb3445de995132d8fcc58f79ddb1475ba69c464071e95c0707c396c0b1b710cceb51efba5f30a271cd456d5f7216d90b412156ecb01dd41f15ac31980649c5eabc7fbb085a38318d43b0683cba055deb9dde4dc4584935473508837c1023993d50b434b311f126df6a0be0653b97a97bbc9b165098dac8dfd6ed6f033ccf7b32cfa3292296222aebfaec4dcd5066b66be45696067dfab907e2984f1bb6067c170e0617e245c9c09a85a061c4b7e2873ce0571b48d557007d5c7ddf5cc2ffa533e2a3975f3687a6d08a09dc1d285cfed129ec887d70bb5aded429b676c242d57c8f36721bf5732b1f25eced0ffedba7254486c9caab3fb3e0ad3b2dc332a06dadd39e5483a314b1d3086cc198b6b6b272fb56e35e0388b1dcddd484fde0ef9d855ca7bd98ebf0f686cec7d5e37f7b5dffbe4ab28c4422adbaef0c45649b0b830dfff90bbea3b7103ea9dd87d856ba7c5bb485319eecc71acc943c733f489ad72e13b1b232cd1eb4ce87917daad4b0405c9905f7a35501c75332d9acb36057715a6abd0958061fda860c00000000bc9aeac4f47acd022927c381012150fed83a99c2d7b268ff2e1c8d162d3feae2c5bdee747aa10566a94f13d4e1a00a4043bd179310e72ec8e4c68659be77907bba82fc416a72c0d2076821f77e8afdbeac769195a01515ab45ba73ec85a2f8a52146dbbc8d585def095aef4e4491362b596a84d2e9fd0131de2c72b71c4bd239146011eaa209957b2bb3f74bf2f42a17440749688d66a18a9d4a7d1e2bbb34dbb2a45460e69a1ec43467665c59438d35fe9b04a94e408ec4bcf7ba1a25bfc287d6189b65711904be9860f8a68d1bab99eed54890f963caef1fa0179224b650f090f67dca59f1241c2a25bc921d522f61e57d2bad88c057d3f7729499a0391fca3a62b27cc0a9b976da3eef333d88ad128ea757697ffdd50633b66b73ea3ddb565bc3d8780f9c0bb2347551969aaa500e7c030da2a92eb3f78d88b91eb547dba2e9be7ab2aa617f0890c39c73c8c2b35ff7ec529f6b8d08e3fcf2630e454bdb6474185ae72ba69310654c9c0b3ba158fe223954e1d46f9d27b0a4e090b0084918b2964bdcee31d258325b89ef96790ed1df4842b482023f1d22fb3e01280f1c8616153035f10bd65de57c1fa7d5a17e77b12e348bd3019092ef548c5249694168dd24df8a7318eccd779da4f547e9f162f484eb3ab9f5bd196f6b68656725d2624b61d09f73586753a1fb7eeb1721973f8e15522487f1dd1412b0f4846801d1abbfe53b755f15047981b162a1de04d52b4d4762ac877e4d718619e8cdba16df688fe95bdc9a1ee99c21004ba7e72985752d89d6892a4169296703fde314457f014ed89c129a4c83b5bee0bb93cb69a83313442837bc03679ee317cf8d1b908b70fae1b1461a398f310ac073642f954ab39e0eda329a94a5c12cf262ca4a25831dbc10aecf83d9d54776c379c230bb488cd6c9295bc31cfab61eb9b5486726f5c854db8aad2642d4468643f3bc8b25cdc9fda7aad04b06b61b185868a44acd46a0bd8debc1e431f19aeddfa3d0e480949bd361f6c988744acafae954c140192306c3066e8e000070e8cd67b65a59923d166a95ca5e0515e2059e1f1aa9a74bfd49e4e37638bfa6b6117b790c4ec7f536d046c38f8ab6eedac1713bcb8860a18cac43e9add3c68c3ce5d17fbf76e966afcd3ed7795540650e093d39926f5e3719156baa54307b4f5e934f24951b3644a7657e798525d3f1207b28527a5bcdeb33e296c6c0e9e1757941ddd24a0d15c9a21918514a3143ef3fc2e775345ea10aeba6767686e9cfa646da377e88fd759a33ff20c9b258fd37d063d02fe22f090c5e324b507cd3bc42248a7abb2c7d0b1b85ecb5a67bf53a2f25d139ea523808678942e1588fd677df161b67b563a446a2cc69d9126fbf308258a13fcd6f53d92d9947311e3de4fa5acd7c2684d9eb3b4feb024e05bbf090836d92e30b68df6a7619542c9acbbb69dc73c781bdc7ef4b25c2af77186f493a5038a56508cc56b7085e13f4264e02a2a3bb515e15301371520481302f2367c883a5ac503ae4269cbbc8fb2f0f77ecaea7b8af04bc24aa90f677a72bbecfdb225864714344a8fd1c07ef664abaefe53bd76ba12c8bf45860a316812af87348682ee7005ac6a00523f4313102742ee5502d8c61c3321d1b872780192f4d00b12b38d0aedd34619c42f49b81d7bddc4ca481ed8f448bc3ad98b13f7176748838d623e007a24948480e978b80ce67ec952eca613091ad4f81cd521b2851bb8b2a6b1da0420eca80aecac9c0887988e1f29906c9ce65b990a00f22ba6f115a7a0001f511ec35dbcd401130173fded8b2e23365caf3d6d7c8f404383f16fcd76b17c220f88c1fe96211bd92c5803c63d9537a2ceb258508d9b1d74ca43174eaefd677ed6db63bb3d7712c9558c7879fbe67b7396c721407953db9dad13291f96d7d0290ad56cf1f65ccf58d3f5b8ba1f78f81d86ae0ea50926ff352d73629da44a6d31598dcdcf81355faed4f5a6ad8cc39d4a414b97f193c896bd3c270097cc96e4a5e36ca9a56a27c52a03decc4837d7b008acc1fd2724f97e0e9591afb5de3af3ec5fc16e1bee79098cc94d638375d69ae5065bedaed575e11b1b0a4d1189830856e8d48a6c50bf18cb9f8919fd8a55ad0b2f7d8c096c7f549fec8e1522be0de2a69699afe47e899ac6d5405c08e2e374326808ba76259d85b971dcce55aceed11583603dd280fd15c8e7b206e8bade3f6d83c6041838ea8b489fb9f92ab220ad5d3cd2af3f45cb2df7094d550b2cfea314469943a159e12c01897a7cc42904eeb24cc507eff010000d22efdcd5cb5d75975582e14960fb0f2b83cb774faea32dfba7ed0e8b6a749785166cb5c77dde7498f67f7f20d0b85a7fe6e7f8a8e3f95bd795165f36440d84434cef17f81697816030e3a86bf003272ca4868ab935fa0d465fb10637a706c9fd04fa4d4eb421e87aa6628a1d6174833af4dbfceab7fc5989550c0847bf27a5243e3b318fffde95d11cf507bc4e092180dd228df9f89d193a160d50c223309eae580a09f4f2f807f17f8ad25c1f5814becdfca7948c7045b242e22d5efab676fe717eb34d2f0fcb77289c8b12caadd2377b7ccdcfab61900971b4a2ac132587174117428739ebb109fa133e483956bd499dfa530cbb3d1df42309f6f0755b043d85776807f25c3b4b518a2274671eb38f3e82ad4397377f85201771877a7cc43b838791a4d4d655ecadf03d8c1687e961c83dbb64c4d54d4b745a3abca7e381a00c6f51f48f6f7ce29ec656d89a1fab216675febedfe6b08c35add5aeb8cf6c0b226d309a222e1783e45e560f6ea64bf7706787f199116341f874321b52b1135830ab8979ae5546aad4ecfdac0045d4d15b4ed2fe26e484793db6aa61d40333355fa96ac5d1b8a5b5fc033475cba14f344007bfd82deb64b5c2eda6c0d528e4de0c21802d6b27554c0e2090f2c4ebd19208ce904cc02756b44bb2f8ebc1d37961c0957a4815487cbf76fdbe1f2b77b563a5663a00952c92579399f7acc1d41d9289ea0345f02f6f760ced802c8e0b14760a43dd04e6c371ceab9f5cb3617cd7ab31457b6821c6a4f34b243fba61f5c553e58ca253d5723382cf5d3f8357347ee2af2d48d86367f993e4b80b849dd3f50b2a89338af97e11b9a796ae2548856cce01334bca0c558e160f16e74699c7eaefd699acdf4d5019bf70f2d9c083f62b5254262f05c01dba59b1779502d3ad310a3039447d730a2cebb1242331a9849921c07336e985a844c55ce6129a650b3fd7cbda52a0cfdf0ef566f24adb8c959e442e9d5663fa16561b185cfb18355863d9b9f91c3829c4b0ba580668402a7a100fcd4a4e901b660863a9537f46e4f36446945e8f62e53e8282ccd7cfe14fca161d7daf592188eb2e11e275f616f4e692db8f318e8fb635d1a2582a3c8ad3050995f4cd810c04b23aaa6b26a2276133b443280f0526c9b1c016a7fdc052eff91d167b2813ec4f868c2da5fd9568da148e0ced0229f415716c1caddba880efa2017a82829125e734b96333da0b15340c149b50be86e3017bdaae3d80ae51c35df37e67684e81b5933cc7bfbe7ef0486d57e3901f9ae3eb1d592eb3fc244ce6555d3d69922dd3dcefecbba207fcbd5144a5ff97bf2216c046348a633284db59c10662350c7484ced762f353cd01a971c88d0eabb68eef856d585e8f5a684dc948b094754362ba8d606f85a755a27895ff5b6b4ea0387574afdf362a43b5535a2838b3f00f24612b9ae47e95f15d8b828efe56152d77871cfda0e0ff9936db3fe9c49f0d0f5ef9b71b81efd2e92d0166a4970254950a51235b66866d5402740adaa584e892572a6f46714704660cfbcaa56ce27cb538a908d1ee2fc7adaa674ce7a717f6e0481a2374f768fa3df8368bf4281bce6f9777f958f36502908d7c921ba745d0cc16b8a9a67f15c26d4b005788b1e90b19cc13f3e925fc14ef31d624c7500710d8f80e5bd4b14dd6bf70c210db6077c69d2d1751fe999442502d3542be12b732e3793e6c5e5c33a15a792ea344b0ed0be1ebb1d4e896e3e62d8d85afad2ae134dabc4f0d3fc719c6245d3bfafa42f0cdc9c0d5c4ba5c20b9da975bfd2f211bee8589ce1dc9652c2c3cee2a5e8a00049e42afe4403a905b60e0dcda1120d32ce36b91719d6308c93dfaa16c23a3b37e88194778be77d5e9e64b39477b76b4644ca32525b73bcf1fd9dc9af7776f2149e368053c58e1c93e1ec4575cb5e0b2da61d5e6b19436f3c095cdb4af4ddfc3364975700e5ff5275f9336b8cb3b959a1cd94f6b9c3a33f35e9ba4b7fea0466edf54e5e2e06a79bd170392c02b09749f3d111ef60baa8016dbf9ba581beab2c43d094add0d7fb7e16f198f3050641255f30a57c3045c1b51dcde5d65613167596365b9c67aaa36fc89c44fbc4c8c96c328554a63a15511b04692651dd5e30780caf0dfce976c665e7b05fa6143914837bc82fb9d9dc5a1660e28a697e8a0a32eb8db109c5a045243d86ea11847fb64ec450112d77ecba32de418629a4ea2ae3f7ed3625b26def5c19813a6386ab4e43838c1fad3d4e92dfd7d3f98b3cf46d6e20304851899c59661e9639f3ff52fa023114907d930d74d605f3f7c5fd9ebb446d807e96cf3bf3517e369dc98f489026ec035a86f3719e1e50a48c0381f7fd2a7eea1d3a09ef7a0ba50b2ae28c2c955db4761ac005226ebc0c18d108e8ac066371be249b80eed88afee799411a50381cacb2d5164f0827720eb9d11b5cc548c2e145291dfbc5d4f70646dfbca077ce8ad3a3f8c627021295cbef70f5013c53e8fce32116e678a7b1dc535d43b429d330e9193f8de1a6c1da4353a86bc722ef1cffe59a012ff9c5f45b85e55ebdaa6b36a519c544ef8a86095e522d7dfbb9cac41e826fcc4bc676297141195f839ebcd8f64599fb15856960f97bc70d2336507d5060282d0988f354eb757c6f4b0ee77e2c0889e5336633ac28e2651c98e7f2fa4c163f8fc196b6798c1400c46710abed12a33a95afa56c7fe55de0b48cc984c80f6d98d212daeefdbcb457217b3962436e481d70967cab6b0943d5da59021ea9fbebf66e86943e029ef95d46d347b834098e1c8fb4c35d15945bc2e336f74c6c80430ad5fc4f5b9c6b41245ecf151eea90763ce3e09e050ae1c0925fa7a5ddbb7f210226cdcf9ee406041b73a5988646b90ed382d08e7a147078f9de025f5617017ec70f65dd25d7ccdb47ad7209474f4ca461ca46f0afe3cb405c3b72d320016d01b62def93fa4fa5a34df145c526fc497329a9e29ce17a929893f7beb417c88804418271dbeb51015821db4737b9cc467f190209649f543675defbf95640d20cdd124e85788b703213f4e99b4f36b74b5d44b67b7bc995ba133da4ae82f3a3db49c9ec039e0285001fc16760da0d07552e1ad621a4bac6d0b6409316e8a78273b79aa70df0e3ca024336d42c530550be8c68897bfa6a44f595bf5be48f8b25b48825ebcba815db4b3124522bc71e3970dbcafd479a6dab40f745a655cc3f9dd5aeb046d25baaaa160ba21f8b3c0292329ae107483c8caafcd70d041facfbf705dda95370a91879fc0ab9132e3b7b02cad69417178c4f34909df7a373bacb289476c25c901be7b52aabfdfcb3415ef3a565c7de2f0128c63e16984e2e98ad23e06b890f22894ebeceefdb472192e501e2c791232933b52ea4b9c4e9fe3654b8b1e08048fbcf58fada1cd49ca6658ce6ecd12102d90c81eac26090efa36514553abb298f7cf1a43bd6d473c1436b6be9e87445de726cfffb00c72de49db0585d677d5b245e15f9a53b4c258ba2fd67d38afd9ccd0d409c0bad675fcfbc1f4e5166fd1b29203274f758f55a266b8f7c9ec8ef1dd4913727fa392ce6b11baf902ea708adddd836982a609718c1dfb810aee6f21e47c27dc6b4eeebe5fc21aae6fe7d2908679c873e2aa45a1ee14cd7e10586216d5e17cdbfacd4bfedf00b7ba7fc46d4ac90667329ba76b4fcc6b991a55c9ed159a2fb9525c975bc0aa4a291fdde14a78b95adcde52fcb5a893ee7b4df6631b3ed5a9d9d9ebe36afcedea777a9e67faad7f7004f0a820aeb6636f24685a15d12abc639aab2233b36584670c667f9e7a3fe1195d35b268d1052d5b4c9625dc963640c2c5e6c37d36acc31755b34f3ee2af7b7ba5dbe105322a3741c567c9edd817f6488fe69301b19481fe2e2cf74b19d4b224598b0ce1fa151fa1ef3d69aaeaab397a5eac72e0b969a09b85e3258e891db207393bc281afa93468b29b7e55cc2decf8292fc68e1a02b2faa873a846680992b37a548c8f724c0125027faa58be5b2836206cc34c063b50270d7fc968dab0d38072ca90bdef91119b72ab417d811d2f32bd41e6ab2bc5b5293f92f7a0a4f172bfea5403cd418db95e1a4232f78f6afd3d13978e206d85fa9ebe2abe444db065d03b6169bc9f0dbfc19237a74bd13c1ef844f839b20018fdaf1be6f1a171f6f3ce2205fdcce38330b88ceba0c5eae812e12be99993d265f806e61ec42c9527287967a1c3b27afb1edc35a5d17bb7f4d20ea708c62c9170ba2ab710f2d7f5dca7b33e0f9434cf0b6ee846fc8bc45d39f252ec682732fb090f46032491155d83a30894a259e037e57de7523481bcc2d704d8d728fbdf048df30f7e4861f62b8e63de47b3838b5062ccd2c125bc581024ea76bd4b1f53057f37d329f7861a2a70fd3b6d6fe252a1b892192ed75c585ab809f702e27e237c4aa2dc947585c2086eeaa29c3ff7e02cb7d3a0aa3a8156d2897daa9c45a2e28ba14fd40c8a3a058805e4b5b10641c3c25b9ab80cce83206b13a1e2bc362eb5ab7e0e677c01fc0486aa32862ad0afa4f1cc8496b961a0eec71c26ad107ead599d8ddd59d85adceb3ea442efcf8ed64f4c66547344dc81ef5b6ac102434395203f58d59656d41dcc192774d70f4f2964e304efde831126d402a240325e603347aa43626b5eb69b0", 0x2000, &(0x7f0000004700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000047c0)={0x90, 0x0, 0x7fffe, {0x5, 0xfffffffffffffff9, 0x7fff, 0x4, 0x0, 0x2, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffff, 0x1, 0xc000, 0x0, r9, r10, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000004880)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0x30, 0x4e21, 0x0, 0xa, 0xa0, 0x20, 0xbd, r4, r9}, {0xffff, 0x100, 0x100000001, 0x6, 0x4, 0xfffffffffffffffe, 0x100000001, 0x6}, {0x9, 0x6, 0x7, 0x4}, 0x1, 0x6e6bbc, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0xff}, 0xf, @in=@rand_addr=0x64010102, 0x0, 0x1, 0x1, 0xb, 0x9, 0x0, 0x2}}, 0xe8) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c000000030101010000000000000000020000000c001980080002000d0800003c0002802c0001"], 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x22020600) r0 = socket(0x2d, 0x2, 0x0) connect$netlink(r0, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x8}, 0xc) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="1c0000001a009b8a140000003b9b301f000000f40000000000000000", 0x1c) recvmmsg(r1, &(0x7f00000000c0), 0x400000000000ec0, 0x2, &(0x7f0000000100)={0x77359400}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4442, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0xbdcb}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x224, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x1bf, 0x33, @mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xe}, @broadcast, @device_a, @random="29cd1b0efd0f", {0x1, 0xfc}}, 0x2000, 0x5, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0xcf, "2689dbaf9eddac828792c79bbbffc207b95a3baba0ae69794b363c353632c45f3af7e85f9da38c6b8d68f768f3bc6b993b215fc2bfdce4160fc043a176363e973c4c2c55b87bc1798367a58cca8c0885aedad01abb49e5131e592907c3e9b34b859be543c3d72b83d5f9675bcd177ad7ce41954ae0e3baaacd3bd73010b62b338d955a536975cadf647e0e1e06c1c00393e09b2762b2da9e07bdd3dd2d53d41132586f0451b11fee7ae278c46b493aa72f510ee0c1066ccb4eef85750bb43439fcc16013585ba3b660b86f2f07a5b8"}, {0xdd, 0x37, "198ef4264fcad6a40da4347352af2b7c1fb199bac62c768d68f09c3548ccf247a1ad59ed65fee0a1efc3fc30d55ba80d19a0106095f8e5"}, {0xdd, 0x8b, "0c6ac7ff9aee9d587d05d52ea68c912807652b9caa8f506597e61ce201fa5da98068112f0cdaf30073060a424c7643f735807f55fd9003e7b3e8f1a12a2b3642b8b279cc47b539846d7c48c2ba469bff80ae938126ee5429162eaac2390d36fd3ccb493b85efd7a9fb52a0ff7ba0ce6165a461cf21d9410f502a62974c25c9ab1f604c3b4cbff22a11328e"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x224}, 0x1, 0x0, 0x0, 0x4040}, 0x4801) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f00000003c0)={0x6, 0x3, 0x1}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000400)=0xffff) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000480)={0x5, 0x20, [0x3, 0x688, 0x9f2, 0x4], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000004c0), 0x100) write$6lowpan_enable(r3, &(0x7f0000000500)='0', 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x6ce00, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r4, 0x8010aebc, &(0x7f0000000680)={0x80a0000, 0xc000}) r5 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)="2a13e1258fb15379be6602669c61557354cc35ac3d4ecb60939db8b463ae711a6731a999a20ed185182122c689858c65c6a0038d37ccbe190e63f85f4f74300ee5e841dcb8ed391f806000553cac5081347b59e69e2a95b29e658fb201b41b569178b8480131294cafafa11fc1c3dc8cdbbfb8c460d006556b8dbdfeb9dd", 0x7e}], 0x1, 0x0, 0x0, 0xc890}, 0x24040045) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000800)=0x7fff, 0x4) socket(0x9, 0x2, 0xff) r6 = syz_create_resource$futex(&(0x7f0000000840)=0x1) r7 = syz_create_resource$futex(&(0x7f00000008c0)=0x1) futex(r6, 0x1, 0x1, &(0x7f0000000880)={0x0, 0x3938700}, r7, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000900)={0x5, 0xffffffffffffffff, 0x1}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000940)=0x0) mq_notify(r1, &(0x7f0000000980)={0x0, 0xd, 0x0, @tid=r9}) socket$kcm(0x29, 0xd, 0x0) ioctl$UBLK_U_CMD_STOP_DEV(r1, 0xc0207507, &(0x7f00000009c0)={0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000a40)={0x9, 0x7, {r9}, {0xee01}, 0xffffffff00000001, 0x7}) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f0000000a80)={r10, 0xffff, 0x0, 0x0, r11}) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <6>, <6> bisect: split chunk #0 of len 6 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 2, 21, 6, 30, 3, 4, 18, 30, 10] detailed listing: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010028a6704cdbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008000d000100000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000302040008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = accept4$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10, 0x80800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) r5 = fanotify_init(0x2, 0x101000) pipe(&(0x7f0000000140)={0xffffffffffffffff}) fanotify_mark(r5, 0x1, 0x4800001e, r6, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000002680)={0x50, 0x0, r8, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x5}}, 0x50) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0xc0202, 0x0) writev(r11, &(0x7f0000000380)=[{&(0x7f00000003c0)="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", 0x200}, {0x0, 0x20000}], 0x2) syz_fuse_handle_req(r7, &(0x7f0000002700)="cab1f92d585917232bcfa47f91900c936355a83b5a41f6f43bd8b0d1a1e13674b6a8596a8376e6851e0b96decd071d92ce4887ddad2b82183858d82c7d11948024607d92ec0f1c23a4e755f29fa557d1353a3ced680f530e822eed64b4d1aaf20d1320f3583cadb9dfde95993487f96bc290dc10cfccc5ec8ea864590fc1678b79b0a36c9668b27ae142d22c305496881af0d0546076ec21e31bdab2465010e779e7140036d2b12f59b971792cfed8d07f0b8ae13ee944268f573ec11c1b14d53880a64fd2fdbe981f4d9af8863191efc03a39d5a3f19badf65dd49443297b38bf0c009eafad5879cb78e63b00e961de7d7180941f0d1e87a2635294bcb4619e9d84be1816784325d23fcb9c66388b586c8e719f3edfa2aa37cc3f6511add854c10fe546d1c11f11eeaff24cecc0d47ec8fd336ec08470f06227e4a9410074a3d715eb6a697b04bdfeda0b6753d880d012ef8fada7f4ed649ca214609e31cace9a33937813012e4c1b787d8f71ce9b495a69e5c8810ff9954b7b96743dcdd7e52ebbf526f339d3c8ad2550326d3a396de5ac90787b352feabe013c4044ca813344c97f836851d6daf2de3a8b07a61d1052bd302a641706af7629a042dc2f0374671b287f1325763e1818beba9f7cab9e25d6f8749f7dea4c5ef684723d33938aca32e19b1c6a6237d899fb397e9023764b3f4d6399885533a802e4d3ca76f2e0234ed6d7257f8cebddc900af88cc21ee2816513045e92f71fc8523894d684678f17b5fdb4adeda98fc019c0ba05efeffeff3bbda1d6d84a98002a74237cb8d13cb30d8a9a7e47e4da8273a47df4e6ea53036b5b154b9597e6eb00fcad29ed04a820b1ce807bf1818344122a6f0aac52d24426feeba0af56925cb4a1e70a84251f2b4d4693e689518a0e159647b5b60a62db699a25275520c208652ce4401bb5dcd633e7c889758d3d213f4dbe69c9bb76e80b6e892bb5f5809e042ee5cb1982a2373b1886711d1e68d0bc3d4c9d69ac605432bf84cd81104e77c71cd7c0708244fc9428edd52f8cc8f3023b4c6d3bbad7a9b874111098c4652b34c428a8f789c5e5f3f84354ab7afec1a7b11d2a34771ebad2f15c169a61b431c8a1cca9ca1596fce65242d03814ebf977da9bbde5707b22b5002cce68bd0f6d196df341c96bd0cf0916b8775e75021663ea82c99a90b844cc5f8b6c56b21b1fbbbf6fb40ed0c29ee4ecc2998df2cbe3a4d75025ef73dd9f3aa5bc7aa694fe573a73453c9ff873d0a8840afd91be319181836de45260b4e252394edae58f840858a9b64f0ff37bb1820031e563250e62ceea5a7c4d2cd4d5d10e57176fcf576e774920db06b36ea02f9cae9c1087bd1866fb4bcf7fbf393093b339860a61c61248000a2a1bbc982fa691e311fa1bf2a38afdf08b574eed0df42bdc30c3db7cdcb71687f48070077f91fef93e8e47e248d3e53e8a79fcb5a8f8aa39b3bfa2dd88d5c5840d517ae8c132d423a37a8be3301d62a99753bc72f674205a11850e045430abbdc4e68223a93c76d6d2f1d646af10a15705793e2fc5a532af3dda88f52063a091f1f79cd5a5b23ea7742b149eab1aa43c21c2f15227a1f94b5580adbb1e1c49ade49d6e8b838cff43aa2426651817f479252c8ef7af9e4a5ad33839be6c15b50016c59f13c26cfca796cfc01207acc69e9d3952f6e71c975bc77d5a001f6f6c044770f54d86a4518a4898e3136988d643dd2de907859f0b4d4de2a2d461ba5e05cff49eda86772799b2e7947fdbb89fc5b0347e87f1b9dbb94842cc1457d07f3e0c41342510f5ccb551cdf0fcac1a758041bff75812de1b2abf341ed5f667c9b0581d2c33e0b17f1b46c2287399c62252edb9c1cf2b80b7a1b4c3c903aa4cf5332a2998b9072f61f589ae5df1168f8d18e98fce2bec1d5d876f9757017b73495a4e8f4f2423cde8875aa8c95a9ce180cac6690657b8a70e5541d5ef46575cd74e063759fe4889f4d9737a6c9732f8b7f7836508814093b9bdac5733938e761b3642910d4df0b646c1b9583a502246988e9ab78de3d011e8590e48eadfcdb70c8aad6dfbe1dbd3ef20d9ba393db4e6cf91e3bb4e84883c60dc20ed974a5decde12d3c5a1c9a00999f8eefc244465f518425820b9713cbfc6027f427b9cd8756edec5b3a0301a01ebb12c6d412ee3422aeb8b291619f62f4ce41511156f73e54b5097051ea777af7cb73b36e1274ce1a3892007466cc793eb0515b8984acb99c04c7eaa51e175bd73d99bc0c67c8ea84d808a7906a6ad330ba2c9651b2ab82d0781a969873dcddb068c15b7899fd560a1c3d44b34e81cce079c46fd86522052659e2c3151c79a8ccab1dfcdb91f53ca067ea1b2aa507278e4166e817eb0d7dea67cde1598a1bdb76a8caf82add2b43fdd10bf80b0d2f32365849c425d6ac3d2d88a76378d23961eb96c8422e785ea61f33e4daec02393d51f44b177755749fe84b43f5246d20177800af05752af524265f34f62bd5167fa647d2118aa905a1af53f07e7447bee29675cc23f547339af140c0818aa974ca16da33e767d508e4f56726c7076acce57a9957d08348ef84a39188e800ca44682fccaa9ee1b42e1aaf7738dced1dce3ef2dadfcba2863f36b5f8080ed22539b5176bc2c57e52e4cfde659c1ce9e179c79f85d60ca51c7453dad593190b19a1be8f5c5b0249d70079f10f9d0f07f25a98bd95e6e6f71101842b55347ee008d58522e8f7598c1636c58fd20984a6bb17fd47e7db4bc72854054e7900cac4174cf0b4eda2406842955fd8a2ba00ea4d490dbbab02d659cea4f932d9ee37c8f35daa4740b3273693ee2c1b00965a79d18ad98ae92bf2e1ea84ff1e6181937d38765cb353c6223ead1257d88a8844cb0be17aecc2dd56b78dcd6e2999fe695db248dd68275a5ad0f223a4629b17a040a766b2bd2376d77a422375de14a3daaf4fee92f23ca831452826bc66d0cee2049acbde07bdbb6ce228147f9ed4f9437301e8ca9e1ace0684700e9623a1534212d4c557712a3196d86c86077e97172d7e89436e95e1d7e7629d5bc908e346e504839498890210ca15bea51bb2840f1275d36b99490ff0706aa3ca9e89f33fd99df863acc3bca504c15501ba9d987999ee118f47b7737d2dfe73ab257d680f983da1f5fd5975491ad966989f7b15e76e4e6b1a2987801adb3b7cd4cb1d2c9d0454429c2955643c8fb82ccf8e93051cc10081f8181af0d143deee686f67ec42db1e9914ed047e4bf0006af01028e3839451fa3e17d33586022c63cafaf6d0fc773c96143473316988d32f9943d7477604a27ae4b8a7093bee2cefe10cc02109c748d0676692a2411e5c3b4c4c1b9ac7f9b71a1a7126dacf4615e8c9c3d38f536e8b32e37f406b3dc44db80a00d6e423deec869edb32a411986be1517b6ea45e1f984a6fbd08edb25a305122fe5a90cc46af48ebc36433a1f27f43d85492ea60fd2f43125e7328da93f7aad97f97910112fed7ae7b1785822356a525df1f3ab4637b68d92ecd8d7f234973c686fb11821bb1de5f8459b57892f1dae08aae1924ee60a904d7be6e6611ec3d00002152ab7e0c29c7bf124dbec9a6eff25e619d89c27d187e3ffff63c996c33f4b7e967b607f36a8ac8dba6beb43395c9c9b2e3e36de29b07f9c2d60cdfd1d02813d4e508c56b99405b752758a01cc25bb5436ea1efd52c536fa1d2fb1cd9b1ee006d42b58600be2c1aba59c480cb6e9224d7a4df920598950634033087d3e356f35cd2f8b021d30f4ba79bc60eb6715c6c9bed84648552395cffa97c8cdb8f562f8f127f0e6f86dc61fab11ff782560d88cf2872d0e07a27f38120a0831a93c377298c2ed4fe180eb078422e5f030540fd21ebd414e6c42f1fa5491b5b8fdcada476376732edbfd66e10a475e2c0a43ccf6a41f7879f4577e987695d8d5097f6920fbe2b9ac2cb424de7afded1b5b7db89f3612c487770d58a7bb7517f1fa7a98ff6db3778d40c5f36b27d233a0c18587220f900f4a8e867e33e24c1981acb3445de995132d8fcc58f79ddb1475ba69c464071e95c0707c396c0b1b710cceb51efba5f30a271cd456d5f7216d90b412156ecb01dd41f15ac31980649c5eabc7fbb085a38318d43b0683cba055deb9dde4dc4584935473508837c1023993d50b434b311f126df6a0be0653b97a97bbc9b165098dac8dfd6ed6f033ccf7b32cfa3292296222aebfaec4dcd5066b66be45696067dfab907e2984f1bb6067c170e0617e245c9c09a85a061c4b7e2873ce0571b48d557007d5c7ddf5cc2ffa533e2a3975f3687a6d08a09dc1d285cfed129ec887d70bb5aded429b676c242d57c8f36721bf5732b1f25eced0ffedba7254486c9caab3fb3e0ad3b2dc332a06dadd39e5483a314b1d3086cc198b6b6b272fb56e35e0388b1dcddd484fde0ef9d855ca7bd98ebf0f686cec7d5e37f7b5dffbe4ab28c4422adbaef0c45649b0b830dfff90bbea3b7103ea9dd87d856ba7c5bb485319eecc71acc943c733f489ad72e13b1b232cd1eb4ce87917daad4b0405c9905f7a35501c75332d9acb36057715a6abd0958061fda860c00000000bc9aeac4f47acd022927c381012150fed83a99c2d7b268ff2e1c8d162d3feae2c5bdee747aa10566a94f13d4e1a00a4043bd179310e72ec8e4c68659be77907bba82fc416a72c0d2076821f77e8afdbeac769195a01515ab45ba73ec85a2f8a52146dbbc8d585def095aef4e4491362b596a84d2e9fd0131de2c72b71c4bd239146011eaa209957b2bb3f74bf2f42a17440749688d66a18a9d4a7d1e2bbb34dbb2a45460e69a1ec43467665c59438d35fe9b04a94e408ec4bcf7ba1a25bfc287d6189b65711904be9860f8a68d1bab99eed54890f963caef1fa0179224b650f090f67dca59f1241c2a25bc921d522f61e57d2bad88c057d3f7729499a0391fca3a62b27cc0a9b976da3eef333d88ad128ea757697ffdd50633b66b73ea3ddb565bc3d8780f9c0bb2347551969aaa500e7c030da2a92eb3f78d88b91eb547dba2e9be7ab2aa617f0890c39c73c8c2b35ff7ec529f6b8d08e3fcf2630e454bdb6474185ae72ba69310654c9c0b3ba158fe223954e1d46f9d27b0a4e090b0084918b2964bdcee31d258325b89ef96790ed1df4842b482023f1d22fb3e01280f1c8616153035f10bd65de57c1fa7d5a17e77b12e348bd3019092ef548c5249694168dd24df8a7318eccd779da4f547e9f162f484eb3ab9f5bd196f6b68656725d2624b61d09f73586753a1fb7eeb1721973f8e15522487f1dd1412b0f4846801d1abbfe53b755f15047981b162a1de04d52b4d4762ac877e4d718619e8cdba16df688fe95bdc9a1ee99c21004ba7e72985752d89d6892a4169296703fde314457f014ed89c129a4c83b5bee0bb93cb69a83313442837bc03679ee317cf8d1b908b70fae1b1461a398f310ac073642f954ab39e0eda329a94a5c12cf262ca4a25831dbc10aecf83d9d54776c379c230bb488cd6c9295bc31cfab61eb9b5486726f5c854db8aad2642d4468643f3bc8b25cdc9fda7aad04b06b61b185868a44acd46a0bd8debc1e431f19aeddfa3d0e480949bd361f6c988744acafae954c140192306c3066e8e000070e8cd67b65a59923d166a95ca5e0515e2059e1f1aa9a74bfd49e4e37638bfa6b6117b790c4ec7f536d046c38f8ab6eedac1713bcb8860a18cac43e9add3c68c3ce5d17fbf76e966afcd3ed7795540650e093d39926f5e3719156baa54307b4f5e934f24951b3644a7657e798525d3f1207b28527a5bcdeb33e296c6c0e9e1757941ddd24a0d15c9a21918514a3143ef3fc2e775345ea10aeba6767686e9cfa646da377e88fd759a33ff20c9b258fd37d063d02fe22f090c5e324b507cd3bc42248a7abb2c7d0b1b85ecb5a67bf53a2f25d139ea523808678942e1588fd677df161b67b563a446a2cc69d9126fbf308258a13fcd6f53d92d9947311e3de4fa5acd7c2684d9eb3b4feb024e05bbf090836d92e30b68df6a7619542c9acbbb69dc73c781bdc7ef4b25c2af77186f493a5038a56508cc56b7085e13f4264e02a2a3bb515e15301371520481302f2367c883a5ac503ae4269cbbc8fb2f0f77ecaea7b8af04bc24aa90f677a72bbecfdb225864714344a8fd1c07ef664abaefe53bd76ba12c8bf45860a316812af87348682ee7005ac6a00523f4313102742ee5502d8c61c3321d1b872780192f4d00b12b38d0aedd34619c42f49b81d7bddc4ca481ed8f448bc3ad98b13f7176748838d623e007a24948480e978b80ce67ec952eca613091ad4f81cd521b2851bb8b2a6b1da0420eca80aecac9c0887988e1f29906c9ce65b990a00f22ba6f115a7a0001f511ec35dbcd401130173fded8b2e23365caf3d6d7c8f404383f16fcd76b17c220f88c1fe96211bd92c5803c63d9537a2ceb258508d9b1d74ca43174eaefd677ed6db63bb3d7712c9558c7879fbe67b7396c721407953db9dad13291f96d7d0290ad56cf1f65ccf58d3f5b8ba1f78f81d86ae0ea50926ff352d73629da44a6d31598dcdcf81355faed4f5a6ad8cc39d4a414b97f193c896bd3c270097cc96e4a5e36ca9a56a27c52a03decc4837d7b008acc1fd2724f97e0e9591afb5de3af3ec5fc16e1bee79098cc94d638375d69ae5065bedaed575e11b1b0a4d1189830856e8d48a6c50bf18cb9f8919fd8a55ad0b2f7d8c096c7f549fec8e1522be0de2a69699afe47e899ac6d5405c08e2e374326808ba76259d85b971dcce55aceed11583603dd280fd15c8e7b206e8bade3f6d83c6041838ea8b489fb9f92ab220ad5d3cd2af3f45cb2df7094d550b2cfea314469943a159e12c01897a7cc42904eeb24cc507eff010000d22efdcd5cb5d75975582e14960fb0f2b83cb774faea32dfba7ed0e8b6a749785166cb5c77dde7498f67f7f20d0b85a7fe6e7f8a8e3f95bd795165f36440d84434cef17f81697816030e3a86bf003272ca4868ab935fa0d465fb10637a706c9fd04fa4d4eb421e87aa6628a1d6174833af4dbfceab7fc5989550c0847bf27a5243e3b318fffde95d11cf507bc4e092180dd228df9f89d193a160d50c223309eae580a09f4f2f807f17f8ad25c1f5814becdfca7948c7045b242e22d5efab676fe717eb34d2f0fcb77289c8b12caadd2377b7ccdcfab61900971b4a2ac132587174117428739ebb109fa133e483956bd499dfa530cbb3d1df42309f6f0755b043d85776807f25c3b4b518a2274671eb38f3e82ad4397377f85201771877a7cc43b838791a4d4d655ecadf03d8c1687e961c83dbb64c4d54d4b745a3abca7e381a00c6f51f48f6f7ce29ec656d89a1fab216675febedfe6b08c35add5aeb8cf6c0b226d309a222e1783e45e560f6ea64bf7706787f199116341f874321b52b1135830ab8979ae5546aad4ecfdac0045d4d15b4ed2fe26e484793db6aa61d40333355fa96ac5d1b8a5b5fc033475cba14f344007bfd82deb64b5c2eda6c0d528e4de0c21802d6b27554c0e2090f2c4ebd19208ce904cc02756b44bb2f8ebc1d37961c0957a4815487cbf76fdbe1f2b77b563a5663a00952c92579399f7acc1d41d9289ea0345f02f6f760ced802c8e0b14760a43dd04e6c371ceab9f5cb3617cd7ab31457b6821c6a4f34b243fba61f5c553e58ca253d5723382cf5d3f8357347ee2af2d48d86367f993e4b80b849dd3f50b2a89338af97e11b9a796ae2548856cce01334bca0c558e160f16e74699c7eaefd699acdf4d5019bf70f2d9c083f62b5254262f05c01dba59b1779502d3ad310a3039447d730a2cebb1242331a9849921c07336e985a844c55ce6129a650b3fd7cbda52a0cfdf0ef566f24adb8c959e442e9d5663fa16561b185cfb18355863d9b9f91c3829c4b0ba580668402a7a100fcd4a4e901b660863a9537f46e4f36446945e8f62e53e8282ccd7cfe14fca161d7daf592188eb2e11e275f616f4e692db8f318e8fb635d1a2582a3c8ad3050995f4cd810c04b23aaa6b26a2276133b443280f0526c9b1c016a7fdc052eff91d167b2813ec4f868c2da5fd9568da148e0ced0229f415716c1caddba880efa2017a82829125e734b96333da0b15340c149b50be86e3017bdaae3d80ae51c35df37e67684e81b5933cc7bfbe7ef0486d57e3901f9ae3eb1d592eb3fc244ce6555d3d69922dd3dcefecbba207fcbd5144a5ff97bf2216c046348a633284db59c10662350c7484ced762f353cd01a971c88d0eabb68eef856d585e8f5a684dc948b094754362ba8d606f85a755a27895ff5b6b4ea0387574afdf362a43b5535a2838b3f00f24612b9ae47e95f15d8b828efe56152d77871cfda0e0ff9936db3fe9c49f0d0f5ef9b71b81efd2e92d0166a4970254950a51235b66866d5402740adaa584e892572a6f46714704660cfbcaa56ce27cb538a908d1ee2fc7adaa674ce7a717f6e0481a2374f768fa3df8368bf4281bce6f9777f958f36502908d7c921ba745d0cc16b8a9a67f15c26d4b005788b1e90b19cc13f3e925fc14ef31d624c7500710d8f80e5bd4b14dd6bf70c210db6077c69d2d1751fe999442502d3542be12b732e3793e6c5e5c33a15a792ea344b0ed0be1ebb1d4e896e3e62d8d85afad2ae134dabc4f0d3fc719c6245d3bfafa42f0cdc9c0d5c4ba5c20b9da975bfd2f211bee8589ce1dc9652c2c3cee2a5e8a00049e42afe4403a905b60e0dcda1120d32ce36b91719d6308c93dfaa16c23a3b37e88194778be77d5e9e64b39477b76b4644ca32525b73bcf1fd9dc9af7776f2149e368053c58e1c93e1ec4575cb5e0b2da61d5e6b19436f3c095cdb4af4ddfc3364975700e5ff5275f9336b8cb3b959a1cd94f6b9c3a33f35e9ba4b7fea0466edf54e5e2e06a79bd170392c02b09749f3d111ef60baa8016dbf9ba581beab2c43d094add0d7fb7e16f198f3050641255f30a57c3045c1b51dcde5d65613167596365b9c67aaa36fc89c44fbc4c8c96c328554a63a15511b04692651dd5e30780caf0dfce976c665e7b05fa6143914837bc82fb9d9dc5a1660e28a697e8a0a32eb8db109c5a045243d86ea11847fb64ec450112d77ecba32de418629a4ea2ae3f7ed3625b26def5c19813a6386ab4e43838c1fad3d4e92dfd7d3f98b3cf46d6e20304851899c59661e9639f3ff52fa023114907d930d74d605f3f7c5fd9ebb446d807e96cf3bf3517e369dc98f489026ec035a86f3719e1e50a48c0381f7fd2a7eea1d3a09ef7a0ba50b2ae28c2c955db4761ac005226ebc0c18d108e8ac066371be249b80eed88afee799411a50381cacb2d5164f0827720eb9d11b5cc548c2e145291dfbc5d4f70646dfbca077ce8ad3a3f8c627021295cbef70f5013c53e8fce32116e678a7b1dc535d43b429d330e9193f8de1a6c1da4353a86bc722ef1cffe59a012ff9c5f45b85e55ebdaa6b36a519c544ef8a86095e522d7dfbb9cac41e826fcc4bc676297141195f839ebcd8f64599fb15856960f97bc70d2336507d5060282d0988f354eb757c6f4b0ee77e2c0889e5336633ac28e2651c98e7f2fa4c163f8fc196b6798c1400c46710abed12a33a95afa56c7fe55de0b48cc984c80f6d98d212daeefdbcb457217b3962436e481d70967cab6b0943d5da59021ea9fbebf66e86943e029ef95d46d347b834098e1c8fb4c35d15945bc2e336f74c6c80430ad5fc4f5b9c6b41245ecf151eea90763ce3e09e050ae1c0925fa7a5ddbb7f210226cdcf9ee406041b73a5988646b90ed382d08e7a147078f9de025f5617017ec70f65dd25d7ccdb47ad7209474f4ca461ca46f0afe3cb405c3b72d320016d01b62def93fa4fa5a34df145c526fc497329a9e29ce17a929893f7beb417c88804418271dbeb51015821db4737b9cc467f190209649f543675defbf95640d20cdd124e85788b703213f4e99b4f36b74b5d44b67b7bc995ba133da4ae82f3a3db49c9ec039e0285001fc16760da0d07552e1ad621a4bac6d0b6409316e8a78273b79aa70df0e3ca024336d42c530550be8c68897bfa6a44f595bf5be48f8b25b48825ebcba815db4b3124522bc71e3970dbcafd479a6dab40f745a655cc3f9dd5aeb046d25baaaa160ba21f8b3c0292329ae107483c8caafcd70d041facfbf705dda95370a91879fc0ab9132e3b7b02cad69417178c4f34909df7a373bacb289476c25c901be7b52aabfdfcb3415ef3a565c7de2f0128c63e16984e2e98ad23e06b890f22894ebeceefdb472192e501e2c791232933b52ea4b9c4e9fe3654b8b1e08048fbcf58fada1cd49ca6658ce6ecd12102d90c81eac26090efa36514553abb298f7cf1a43bd6d473c1436b6be9e87445de726cfffb00c72de49db0585d677d5b245e15f9a53b4c258ba2fd67d38afd9ccd0d409c0bad675fcfbc1f4e5166fd1b29203274f758f55a266b8f7c9ec8ef1dd4913727fa392ce6b11baf902ea708adddd836982a609718c1dfb810aee6f21e47c27dc6b4eeebe5fc21aae6fe7d2908679c873e2aa45a1ee14cd7e10586216d5e17cdbfacd4bfedf00b7ba7fc46d4ac90667329ba76b4fcc6b991a55c9ed159a2fb9525c975bc0aa4a291fdde14a78b95adcde52fcb5a893ee7b4df6631b3ed5a9d9d9ebe36afcedea777a9e67faad7f7004f0a820aeb6636f24685a15d12abc639aab2233b36584670c667f9e7a3fe1195d35b268d1052d5b4c9625dc963640c2c5e6c37d36acc31755b34f3ee2af7b7ba5dbe105322a3741c567c9edd817f6488fe69301b19481fe2e2cf74b19d4b224598b0ce1fa151fa1ef3d69aaeaab397a5eac72e0b969a09b85e3258e891db207393bc281afa93468b29b7e55cc2decf8292fc68e1a02b2faa873a846680992b37a548c8f724c0125027faa58be5b2836206cc34c063b50270d7fc968dab0d38072ca90bdef91119b72ab417d811d2f32bd41e6ab2bc5b5293f92f7a0a4f172bfea5403cd418db95e1a4232f78f6afd3d13978e206d85fa9ebe2abe444db065d03b6169bc9f0dbfc19237a74bd13c1ef844f839b20018fdaf1be6f1a171f6f3ce2205fdcce38330b88ceba0c5eae812e12be99993d265f806e61ec42c9527287967a1c3b27afb1edc35a5d17bb7f4d20ea708c62c9170ba2ab710f2d7f5dca7b33e0f9434cf0b6ee846fc8bc45d39f252ec682732fb090f46032491155d83a30894a259e037e57de7523481bcc2d704d8d728fbdf048df30f7e4861f62b8e63de47b3838b5062ccd2c125bc581024ea76bd4b1f53057f37d329f7861a2a70fd3b6d6fe252a1b892192ed75c585ab809f702e27e237c4aa2dc947585c2086eeaa29c3ff7e02cb7d3a0aa3a8156d2897daa9c45a2e28ba14fd40c8a3a058805e4b5b10641c3c25b9ab80cce83206b13a1e2bc362eb5ab7e0e677c01fc0486aa32862ad0afa4f1cc8496b961a0eec71c26ad107ead599d8ddd59d85adceb3ea442efcf8ed64f4c66547344dc81ef5b6ac102434395203f58d59656d41dcc192774d70f4f2964e304efde831126d402a240325e603347aa43626b5eb69b0", 0x2000, &(0x7f0000004700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000047c0)={0x90, 0x0, 0x7fffe, {0x5, 0xfffffffffffffff9, 0x7fff, 0x4, 0x0, 0x2, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffff, 0x1, 0xc000, 0x0, r9, r10, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000004880)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0x30, 0x4e21, 0x0, 0xa, 0xa0, 0x20, 0xbd, r4, r9}, {0xffff, 0x100, 0x100000001, 0x6, 0x4, 0xfffffffffffffffe, 0x100000001, 0x6}, {0x9, 0x6, 0x7, 0x4}, 0x1, 0x6e6bbc, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0xff}, 0xf, @in=@rand_addr=0x64010102, 0x0, 0x1, 0x1, 0xb, 0x9, 0x0, 0x2}}, 0xe8) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c000000030101010000000000000000020000000c001980080002000d0800003c0002802c0001"], 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x22020600) r0 = socket(0x2d, 0x2, 0x0) connect$netlink(r0, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x8}, 0xc) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="1c0000001a009b8a140000003b9b301f000000f40000000000000000", 0x1c) recvmmsg(r1, &(0x7f00000000c0), 0x400000000000ec0, 0x2, &(0x7f0000000100)={0x77359400}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4442, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0xbdcb}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x224, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x1bf, 0x33, @mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xe}, @broadcast, @device_a, @random="29cd1b0efd0f", {0x1, 0xfc}}, 0x2000, 0x5, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0xcf, "2689dbaf9eddac828792c79bbbffc207b95a3baba0ae69794b363c353632c45f3af7e85f9da38c6b8d68f768f3bc6b993b215fc2bfdce4160fc043a176363e973c4c2c55b87bc1798367a58cca8c0885aedad01abb49e5131e592907c3e9b34b859be543c3d72b83d5f9675bcd177ad7ce41954ae0e3baaacd3bd73010b62b338d955a536975cadf647e0e1e06c1c00393e09b2762b2da9e07bdd3dd2d53d41132586f0451b11fee7ae278c46b493aa72f510ee0c1066ccb4eef85750bb43439fcc16013585ba3b660b86f2f07a5b8"}, {0xdd, 0x37, "198ef4264fcad6a40da4347352af2b7c1fb199bac62c768d68f09c3548ccf247a1ad59ed65fee0a1efc3fc30d55ba80d19a0106095f8e5"}, {0xdd, 0x8b, "0c6ac7ff9aee9d587d05d52ea68c912807652b9caa8f506597e61ce201fa5da98068112f0cdaf30073060a424c7643f735807f55fd9003e7b3e8f1a12a2b3642b8b279cc47b539846d7c48c2ba469bff80ae938126ee5429162eaac2390d36fd3ccb493b85efd7a9fb52a0ff7ba0ce6165a461cf21d9410f502a62974c25c9ab1f604c3b4cbff22a11328e"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x224}, 0x1, 0x0, 0x0, 0x4040}, 0x4801) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f00000003c0)={0x6, 0x3, 0x1}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000400)=0xffff) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000480)={0x5, 0x20, [0x3, 0x688, 0x9f2, 0x4], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000004c0), 0x100) write$6lowpan_enable(r3, &(0x7f0000000500)='0', 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x6ce00, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r4, 0x8010aebc, &(0x7f0000000680)={0x80a0000, 0xc000}) r5 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)="2a13e1258fb15379be6602669c61557354cc35ac3d4ecb60939db8b463ae711a6731a999a20ed185182122c689858c65c6a0038d37ccbe190e63f85f4f74300ee5e841dcb8ed391f806000553cac5081347b59e69e2a95b29e658fb201b41b569178b8480131294cafafa11fc1c3dc8cdbbfb8c460d006556b8dbdfeb9dd", 0x7e}], 0x1, 0x0, 0x0, 0xc890}, 0x24040045) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000800)=0x7fff, 0x4) socket(0x9, 0x2, 0xff) r6 = syz_create_resource$futex(&(0x7f0000000840)=0x1) r7 = syz_create_resource$futex(&(0x7f00000008c0)=0x1) futex(r6, 0x1, 0x1, &(0x7f0000000880)={0x0, 0x3938700}, r7, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000900)={0x5, 0xffffffffffffffff, 0x1}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000940)=0x0) mq_notify(r1, &(0x7f0000000980)={0x0, 0xd, 0x0, @tid=r9}) socket$kcm(0x29, 0xd, 0x0) ioctl$UBLK_U_CMD_STOP_DEV(r1, 0xc0207507, &(0x7f00000009c0)={0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000a40)={0x9, 0x7, {r9}, {0xee01}, 0xffffffff00000001, 0x7}) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f0000000a80)={r10, 0xffff, 0x0, 0x0, r11}) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 30, 14, 6, 30, 3, 4, 18, 30, 10] detailed listing: executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000e40)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000001100007802"], &(0x7f0000000e80)=0x2a0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x1) fsmount(r1, 0x0, 0xa) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'lo\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000300)=0x0) r8 = eventfd2(0x3, 0x80000) io_pgetevents(r7, 0x2, 0x0, &(0x7f0000000340), 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000380)=[&(0x7f0000000680)={0x1802, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, r8}]) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_destroy(r7) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x2, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xfff2}, {0x2}}}, 0x24}}, 0x0) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r2, &(0x7f0000000140)={0x6000000d}) sched_setscheduler(0x0, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0x0, &(0x7f00000003c0)={0x8, 0x110008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) unshare(0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) socket$unix(0x1, 0x1, 0x0) executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000540)=0x11) readv(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/180, 0xb4}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utimes(&(0x7f00000004c0)='./file0\x00', 0x0) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000080)) r3 = open(&(0x7f0000000040)='.\x00', 0x80080, 0x20) linkat(r3, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) openat$cgroup_int(r3, &(0x7f00000003c0)='cgroup.clone_children\x00', 0x2, 0x0) executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4442, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0xbdcb}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x224, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x1bf, 0x33, @mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xe}, @broadcast, @device_a, @random="29cd1b0efd0f", {0x1, 0xfc}}, 0x2000, 0x5, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0xcf, "2689dbaf9eddac828792c79bbbffc207b95a3baba0ae69794b363c353632c45f3af7e85f9da38c6b8d68f768f3bc6b993b215fc2bfdce4160fc043a176363e973c4c2c55b87bc1798367a58cca8c0885aedad01abb49e5131e592907c3e9b34b859be543c3d72b83d5f9675bcd177ad7ce41954ae0e3baaacd3bd73010b62b338d955a536975cadf647e0e1e06c1c00393e09b2762b2da9e07bdd3dd2d53d41132586f0451b11fee7ae278c46b493aa72f510ee0c1066ccb4eef85750bb43439fcc16013585ba3b660b86f2f07a5b8"}, {0xdd, 0x37, "198ef4264fcad6a40da4347352af2b7c1fb199bac62c768d68f09c3548ccf247a1ad59ed65fee0a1efc3fc30d55ba80d19a0106095f8e5"}, {0xdd, 0x8b, "0c6ac7ff9aee9d587d05d52ea68c912807652b9caa8f506597e61ce201fa5da98068112f0cdaf30073060a424c7643f735807f55fd9003e7b3e8f1a12a2b3642b8b279cc47b539846d7c48c2ba469bff80ae938126ee5429162eaac2390d36fd3ccb493b85efd7a9fb52a0ff7ba0ce6165a461cf21d9410f502a62974c25c9ab1f604c3b4cbff22a11328e"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x224}, 0x1, 0x0, 0x0, 0x4040}, 0x4801) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f00000003c0)={0x6, 0x3, 0x1}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000400)=0xffff) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000480)={0x5, 0x20, [0x3, 0x688, 0x9f2, 0x4], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000004c0), 0x100) write$6lowpan_enable(r3, &(0x7f0000000500)='0', 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x6ce00, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r4, 0x8010aebc, &(0x7f0000000680)={0x80a0000, 0xc000}) r5 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)="2a13e1258fb15379be6602669c61557354cc35ac3d4ecb60939db8b463ae711a6731a999a20ed185182122c689858c65c6a0038d37ccbe190e63f85f4f74300ee5e841dcb8ed391f806000553cac5081347b59e69e2a95b29e658fb201b41b569178b8480131294cafafa11fc1c3dc8cdbbfb8c460d006556b8dbdfeb9dd", 0x7e}], 0x1, 0x0, 0x0, 0xc890}, 0x24040045) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000800)=0x7fff, 0x4) socket(0x9, 0x2, 0xff) r6 = syz_create_resource$futex(&(0x7f0000000840)=0x1) r7 = syz_create_resource$futex(&(0x7f00000008c0)=0x1) futex(r6, 0x1, 0x1, &(0x7f0000000880)={0x0, 0x3938700}, r7, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000900)={0x5, 0xffffffffffffffff, 0x1}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000940)=0x0) mq_notify(r1, &(0x7f0000000980)={0x0, 0xd, 0x0, @tid=r9}) socket$kcm(0x29, 0xd, 0x0) ioctl$UBLK_U_CMD_STOP_DEV(r1, 0xc0207507, &(0x7f00000009c0)={0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000a40)={0x9, 0x7, {r9}, {0xee01}, 0xffffffff00000001, 0x7}) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f0000000a80)={r10, 0xffff, 0x0, 0x0, r11}) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event bisect: the chunk can be dropped bisect: split chunk #1 of len 6 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 30, 14, 4, 18, 30, 10] detailed listing: executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000e40)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000001100007802"], &(0x7f0000000e80)=0x2a0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x1) fsmount(r1, 0x0, 0xa) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'lo\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000300)=0x0) r8 = eventfd2(0x3, 0x80000) io_pgetevents(r7, 0x2, 0x0, &(0x7f0000000340), 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000380)=[&(0x7f0000000680)={0x1802, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, r8}]) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_destroy(r7) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x2, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xfff2}, {0x2}}}, 0x24}}, 0x0) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r2, &(0x7f0000000140)={0x6000000d}) sched_setscheduler(0x0, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0x0, &(0x7f00000003c0)={0x8, 0x110008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) unshare(0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) socket$unix(0x1, 0x1, 0x0) executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000540)=0x11) readv(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/180, 0xb4}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utimes(&(0x7f00000004c0)='./file0\x00', 0x0) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000080)) r3 = open(&(0x7f0000000040)='.\x00', 0x80080, 0x20) linkat(r3, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) openat$cgroup_int(r3, &(0x7f00000003c0)='cgroup.clone_children\x00', 0x2, 0x0) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 30, 14, 6, 30, 3, 10] detailed listing: executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000e40)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000001100007802"], &(0x7f0000000e80)=0x2a0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x1) fsmount(r1, 0x0, 0xa) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'lo\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000300)=0x0) r8 = eventfd2(0x3, 0x80000) io_pgetevents(r7, 0x2, 0x0, &(0x7f0000000340), 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000380)=[&(0x7f0000000680)={0x1802, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, r8}]) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_destroy(r7) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x2, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xfff2}, {0x2}}}, 0x24}}, 0x0) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r2, &(0x7f0000000140)={0x6000000d}) sched_setscheduler(0x0, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0x0, &(0x7f00000003c0)={0x8, 0x110008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) unshare(0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) socket$unix(0x1, 0x1, 0x0) executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000540)=0x11) readv(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/180, 0xb4}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utimes(&(0x7f00000004c0)='./file0\x00', 0x0) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000080)) r3 = open(&(0x7f0000000040)='.\x00', 0x80080, 0x20) linkat(r3, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) openat$cgroup_int(r3, &(0x7f00000003c0)='cgroup.clone_children\x00', 0x2, 0x0) executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4442, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0xbdcb}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x224, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x1bf, 0x33, @mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xe}, @broadcast, @device_a, @random="29cd1b0efd0f", {0x1, 0xfc}}, 0x2000, 0x5, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0xcf, "2689dbaf9eddac828792c79bbbffc207b95a3baba0ae69794b363c353632c45f3af7e85f9da38c6b8d68f768f3bc6b993b215fc2bfdce4160fc043a176363e973c4c2c55b87bc1798367a58cca8c0885aedad01abb49e5131e592907c3e9b34b859be543c3d72b83d5f9675bcd177ad7ce41954ae0e3baaacd3bd73010b62b338d955a536975cadf647e0e1e06c1c00393e09b2762b2da9e07bdd3dd2d53d41132586f0451b11fee7ae278c46b493aa72f510ee0c1066ccb4eef85750bb43439fcc16013585ba3b660b86f2f07a5b8"}, {0xdd, 0x37, "198ef4264fcad6a40da4347352af2b7c1fb199bac62c768d68f09c3548ccf247a1ad59ed65fee0a1efc3fc30d55ba80d19a0106095f8e5"}, {0xdd, 0x8b, "0c6ac7ff9aee9d587d05d52ea68c912807652b9caa8f506597e61ce201fa5da98068112f0cdaf30073060a424c7643f735807f55fd9003e7b3e8f1a12a2b3642b8b279cc47b539846d7c48c2ba469bff80ae938126ee5429162eaac2390d36fd3ccb493b85efd7a9fb52a0ff7ba0ce6165a461cf21d9410f502a62974c25c9ab1f604c3b4cbff22a11328e"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x224}, 0x1, 0x0, 0x0, 0x4040}, 0x4801) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f00000003c0)={0x6, 0x3, 0x1}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000400)=0xffff) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000480)={0x5, 0x20, [0x3, 0x688, 0x9f2, 0x4], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000004c0), 0x100) write$6lowpan_enable(r3, &(0x7f0000000500)='0', 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x6ce00, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r4, 0x8010aebc, &(0x7f0000000680)={0x80a0000, 0xc000}) r5 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)="2a13e1258fb15379be6602669c61557354cc35ac3d4ecb60939db8b463ae711a6731a999a20ed185182122c689858c65c6a0038d37ccbe190e63f85f4f74300ee5e841dcb8ed391f806000553cac5081347b59e69e2a95b29e658fb201b41b569178b8480131294cafafa11fc1c3dc8cdbbfb8c460d006556b8dbdfeb9dd", 0x7e}], 0x1, 0x0, 0x0, 0xc890}, 0x24040045) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000800)=0x7fff, 0x4) socket(0x9, 0x2, 0xff) r6 = syz_create_resource$futex(&(0x7f0000000840)=0x1) r7 = syz_create_resource$futex(&(0x7f00000008c0)=0x1) futex(r6, 0x1, 0x1, &(0x7f0000000880)={0x0, 0x3938700}, r7, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000900)={0x5, 0xffffffffffffffff, 0x1}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000940)=0x0) mq_notify(r1, &(0x7f0000000980)={0x0, 0xd, 0x0, @tid=r9}) socket$kcm(0x29, 0xd, 0x0) ioctl$UBLK_U_CMD_STOP_DEV(r1, 0xc0207507, &(0x7f00000009c0)={0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000a40)={0x9, 0x7, {r9}, {0xee01}, 0xffffffff00000001, 0x7}) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f0000000a80)={r10, 0xffff, 0x0, 0x0, r11}) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program did not crash bisect: split chunks (needed=true): <3>, <3>, <3> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 6, 30, 3, 4, 18, 30, 10] detailed listing: executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000540)=0x11) readv(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/180, 0xb4}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utimes(&(0x7f00000004c0)='./file0\x00', 0x0) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000080)) r3 = open(&(0x7f0000000040)='.\x00', 0x80080, 0x20) linkat(r3, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) openat$cgroup_int(r3, &(0x7f00000003c0)='cgroup.clone_children\x00', 0x2, 0x0) executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4442, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0xbdcb}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x224, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x1bf, 0x33, @mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xe}, @broadcast, @device_a, @random="29cd1b0efd0f", {0x1, 0xfc}}, 0x2000, 0x5, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0xcf, "2689dbaf9eddac828792c79bbbffc207b95a3baba0ae69794b363c353632c45f3af7e85f9da38c6b8d68f768f3bc6b993b215fc2bfdce4160fc043a176363e973c4c2c55b87bc1798367a58cca8c0885aedad01abb49e5131e592907c3e9b34b859be543c3d72b83d5f9675bcd177ad7ce41954ae0e3baaacd3bd73010b62b338d955a536975cadf647e0e1e06c1c00393e09b2762b2da9e07bdd3dd2d53d41132586f0451b11fee7ae278c46b493aa72f510ee0c1066ccb4eef85750bb43439fcc16013585ba3b660b86f2f07a5b8"}, {0xdd, 0x37, "198ef4264fcad6a40da4347352af2b7c1fb199bac62c768d68f09c3548ccf247a1ad59ed65fee0a1efc3fc30d55ba80d19a0106095f8e5"}, {0xdd, 0x8b, "0c6ac7ff9aee9d587d05d52ea68c912807652b9caa8f506597e61ce201fa5da98068112f0cdaf30073060a424c7643f735807f55fd9003e7b3e8f1a12a2b3642b8b279cc47b539846d7c48c2ba469bff80ae938126ee5429162eaac2390d36fd3ccb493b85efd7a9fb52a0ff7ba0ce6165a461cf21d9410f502a62974c25c9ab1f604c3b4cbff22a11328e"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x224}, 0x1, 0x0, 0x0, 0x4040}, 0x4801) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f00000003c0)={0x6, 0x3, 0x1}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000400)=0xffff) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000480)={0x5, 0x20, [0x3, 0x688, 0x9f2, 0x4], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000004c0), 0x100) write$6lowpan_enable(r3, &(0x7f0000000500)='0', 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x6ce00, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r4, 0x8010aebc, &(0x7f0000000680)={0x80a0000, 0xc000}) r5 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)="2a13e1258fb15379be6602669c61557354cc35ac3d4ecb60939db8b463ae711a6731a999a20ed185182122c689858c65c6a0038d37ccbe190e63f85f4f74300ee5e841dcb8ed391f806000553cac5081347b59e69e2a95b29e658fb201b41b569178b8480131294cafafa11fc1c3dc8cdbbfb8c460d006556b8dbdfeb9dd", 0x7e}], 0x1, 0x0, 0x0, 0xc890}, 0x24040045) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000800)=0x7fff, 0x4) socket(0x9, 0x2, 0xff) r6 = syz_create_resource$futex(&(0x7f0000000840)=0x1) r7 = syz_create_resource$futex(&(0x7f00000008c0)=0x1) futex(r6, 0x1, 0x1, &(0x7f0000000880)={0x0, 0x3938700}, r7, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000900)={0x5, 0xffffffffffffffff, 0x1}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000940)=0x0) mq_notify(r1, &(0x7f0000000980)={0x0, 0xd, 0x0, @tid=r9}) socket$kcm(0x29, 0xd, 0x0) ioctl$UBLK_U_CMD_STOP_DEV(r1, 0xc0207507, &(0x7f00000009c0)={0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000a40)={0x9, 0x7, {r9}, {0xee01}, 0xffffffff00000001, 0x7}) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f0000000a80)={r10, 0xffff, 0x0, 0x0, r11}) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 3, 4, 18, 30, 10] detailed listing: executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000540)=0x11) readv(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/180, 0xb4}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utimes(&(0x7f00000004c0)='./file0\x00', 0x0) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000080)) r3 = open(&(0x7f0000000040)='.\x00', 0x80080, 0x20) linkat(r3, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) openat$cgroup_int(r3, &(0x7f00000003c0)='cgroup.clone_children\x00', 0x2, 0x0) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 6, 30, 4, 18, 30, 10] detailed listing: executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000540)=0x11) readv(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/180, 0xb4}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utimes(&(0x7f00000004c0)='./file0\x00', 0x0) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000080)) r3 = open(&(0x7f0000000040)='.\x00', 0x80080, 0x20) linkat(r3, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) openat$cgroup_int(r3, &(0x7f00000003c0)='cgroup.clone_children\x00', 0x2, 0x0) executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4442, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0xbdcb}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x224, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x1bf, 0x33, @mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xe}, @broadcast, @device_a, @random="29cd1b0efd0f", {0x1, 0xfc}}, 0x2000, 0x5, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0xcf, "2689dbaf9eddac828792c79bbbffc207b95a3baba0ae69794b363c353632c45f3af7e85f9da38c6b8d68f768f3bc6b993b215fc2bfdce4160fc043a176363e973c4c2c55b87bc1798367a58cca8c0885aedad01abb49e5131e592907c3e9b34b859be543c3d72b83d5f9675bcd177ad7ce41954ae0e3baaacd3bd73010b62b338d955a536975cadf647e0e1e06c1c00393e09b2762b2da9e07bdd3dd2d53d41132586f0451b11fee7ae278c46b493aa72f510ee0c1066ccb4eef85750bb43439fcc16013585ba3b660b86f2f07a5b8"}, {0xdd, 0x37, "198ef4264fcad6a40da4347352af2b7c1fb199bac62c768d68f09c3548ccf247a1ad59ed65fee0a1efc3fc30d55ba80d19a0106095f8e5"}, {0xdd, 0x8b, "0c6ac7ff9aee9d587d05d52ea68c912807652b9caa8f506597e61ce201fa5da98068112f0cdaf30073060a424c7643f735807f55fd9003e7b3e8f1a12a2b3642b8b279cc47b539846d7c48c2ba469bff80ae938126ee5429162eaac2390d36fd3ccb493b85efd7a9fb52a0ff7ba0ce6165a461cf21d9410f502a62974c25c9ab1f604c3b4cbff22a11328e"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x224}, 0x1, 0x0, 0x0, 0x4040}, 0x4801) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f00000003c0)={0x6, 0x3, 0x1}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000400)=0xffff) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000480)={0x5, 0x20, [0x3, 0x688, 0x9f2, 0x4], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000004c0), 0x100) write$6lowpan_enable(r3, &(0x7f0000000500)='0', 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x6ce00, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r4, 0x8010aebc, &(0x7f0000000680)={0x80a0000, 0xc000}) r5 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)="2a13e1258fb15379be6602669c61557354cc35ac3d4ecb60939db8b463ae711a6731a999a20ed185182122c689858c65c6a0038d37ccbe190e63f85f4f74300ee5e841dcb8ed391f806000553cac5081347b59e69e2a95b29e658fb201b41b569178b8480131294cafafa11fc1c3dc8cdbbfb8c460d006556b8dbdfeb9dd", 0x7e}], 0x1, 0x0, 0x0, 0xc890}, 0x24040045) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000800)=0x7fff, 0x4) socket(0x9, 0x2, 0xff) r6 = syz_create_resource$futex(&(0x7f0000000840)=0x1) r7 = syz_create_resource$futex(&(0x7f00000008c0)=0x1) futex(r6, 0x1, 0x1, &(0x7f0000000880)={0x0, 0x3938700}, r7, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000900)={0x5, 0xffffffffffffffff, 0x1}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000940)=0x0) mq_notify(r1, &(0x7f0000000980)={0x0, 0xd, 0x0, @tid=r9}) socket$kcm(0x29, 0xd, 0x0) ioctl$UBLK_U_CMD_STOP_DEV(r1, 0xc0207507, &(0x7f00000009c0)={0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000a40)={0x9, 0x7, {r9}, {0xee01}, 0xffffffff00000001, 0x7}) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f0000000a80)={r10, 0xffff, 0x0, 0x0, r11}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program did not crash bisect: split chunk #2 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 6, 30, 3, 30, 10] detailed listing: executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000540)=0x11) readv(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/180, 0xb4}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utimes(&(0x7f00000004c0)='./file0\x00', 0x0) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000080)) r3 = open(&(0x7f0000000040)='.\x00', 0x80080, 0x20) linkat(r3, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) openat$cgroup_int(r3, &(0x7f00000003c0)='cgroup.clone_children\x00', 0x2, 0x0) executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4442, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0xbdcb}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x224, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x1bf, 0x33, @mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xe}, @broadcast, @device_a, @random="29cd1b0efd0f", {0x1, 0xfc}}, 0x2000, 0x5, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0xcf, "2689dbaf9eddac828792c79bbbffc207b95a3baba0ae69794b363c353632c45f3af7e85f9da38c6b8d68f768f3bc6b993b215fc2bfdce4160fc043a176363e973c4c2c55b87bc1798367a58cca8c0885aedad01abb49e5131e592907c3e9b34b859be543c3d72b83d5f9675bcd177ad7ce41954ae0e3baaacd3bd73010b62b338d955a536975cadf647e0e1e06c1c00393e09b2762b2da9e07bdd3dd2d53d41132586f0451b11fee7ae278c46b493aa72f510ee0c1066ccb4eef85750bb43439fcc16013585ba3b660b86f2f07a5b8"}, {0xdd, 0x37, "198ef4264fcad6a40da4347352af2b7c1fb199bac62c768d68f09c3548ccf247a1ad59ed65fee0a1efc3fc30d55ba80d19a0106095f8e5"}, {0xdd, 0x8b, "0c6ac7ff9aee9d587d05d52ea68c912807652b9caa8f506597e61ce201fa5da98068112f0cdaf30073060a424c7643f735807f55fd9003e7b3e8f1a12a2b3642b8b279cc47b539846d7c48c2ba469bff80ae938126ee5429162eaac2390d36fd3ccb493b85efd7a9fb52a0ff7ba0ce6165a461cf21d9410f502a62974c25c9ab1f604c3b4cbff22a11328e"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x224}, 0x1, 0x0, 0x0, 0x4040}, 0x4801) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f00000003c0)={0x6, 0x3, 0x1}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000400)=0xffff) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000480)={0x5, 0x20, [0x3, 0x688, 0x9f2, 0x4], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000004c0), 0x100) write$6lowpan_enable(r3, &(0x7f0000000500)='0', 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x6ce00, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r4, 0x8010aebc, &(0x7f0000000680)={0x80a0000, 0xc000}) r5 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)="2a13e1258fb15379be6602669c61557354cc35ac3d4ecb60939db8b463ae711a6731a999a20ed185182122c689858c65c6a0038d37ccbe190e63f85f4f74300ee5e841dcb8ed391f806000553cac5081347b59e69e2a95b29e658fb201b41b569178b8480131294cafafa11fc1c3dc8cdbbfb8c460d006556b8dbdfeb9dd", 0x7e}], 0x1, 0x0, 0x0, 0xc890}, 0x24040045) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000800)=0x7fff, 0x4) socket(0x9, 0x2, 0xff) r6 = syz_create_resource$futex(&(0x7f0000000840)=0x1) r7 = syz_create_resource$futex(&(0x7f00000008c0)=0x1) futex(r6, 0x1, 0x1, &(0x7f0000000880)={0x0, 0x3938700}, r7, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000900)={0x5, 0xffffffffffffffff, 0x1}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000940)=0x0) mq_notify(r1, &(0x7f0000000980)={0x0, 0xd, 0x0, @tid=r9}) socket$kcm(0x29, 0xd, 0x0) ioctl$UBLK_U_CMD_STOP_DEV(r1, 0xc0207507, &(0x7f00000009c0)={0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000a40)={0x9, 0x7, {r9}, {0xee01}, 0xffffffff00000001, 0x7}) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f0000000a80)={r10, 0xffff, 0x0, 0x0, r11}) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 6, 30, 3, 4, 18, 10] detailed listing: executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000540)=0x11) readv(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/180, 0xb4}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utimes(&(0x7f00000004c0)='./file0\x00', 0x0) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000080)) r3 = open(&(0x7f0000000040)='.\x00', 0x80080, 0x20) linkat(r3, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) openat$cgroup_int(r3, &(0x7f00000003c0)='cgroup.clone_children\x00', 0x2, 0x0) executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4442, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0xbdcb}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x224, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x1bf, 0x33, @mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xe}, @broadcast, @device_a, @random="29cd1b0efd0f", {0x1, 0xfc}}, 0x2000, 0x5, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0xcf, "2689dbaf9eddac828792c79bbbffc207b95a3baba0ae69794b363c353632c45f3af7e85f9da38c6b8d68f768f3bc6b993b215fc2bfdce4160fc043a176363e973c4c2c55b87bc1798367a58cca8c0885aedad01abb49e5131e592907c3e9b34b859be543c3d72b83d5f9675bcd177ad7ce41954ae0e3baaacd3bd73010b62b338d955a536975cadf647e0e1e06c1c00393e09b2762b2da9e07bdd3dd2d53d41132586f0451b11fee7ae278c46b493aa72f510ee0c1066ccb4eef85750bb43439fcc16013585ba3b660b86f2f07a5b8"}, {0xdd, 0x37, "198ef4264fcad6a40da4347352af2b7c1fb199bac62c768d68f09c3548ccf247a1ad59ed65fee0a1efc3fc30d55ba80d19a0106095f8e5"}, {0xdd, 0x8b, "0c6ac7ff9aee9d587d05d52ea68c912807652b9caa8f506597e61ce201fa5da98068112f0cdaf30073060a424c7643f735807f55fd9003e7b3e8f1a12a2b3642b8b279cc47b539846d7c48c2ba469bff80ae938126ee5429162eaac2390d36fd3ccb493b85efd7a9fb52a0ff7ba0ce6165a461cf21d9410f502a62974c25c9ab1f604c3b4cbff22a11328e"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x224}, 0x1, 0x0, 0x0, 0x4040}, 0x4801) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f00000003c0)={0x6, 0x3, 0x1}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000400)=0xffff) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000480)={0x5, 0x20, [0x3, 0x688, 0x9f2, 0x4], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000004c0), 0x100) write$6lowpan_enable(r3, &(0x7f0000000500)='0', 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x6ce00, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r4, 0x8010aebc, &(0x7f0000000680)={0x80a0000, 0xc000}) r5 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)="2a13e1258fb15379be6602669c61557354cc35ac3d4ecb60939db8b463ae711a6731a999a20ed185182122c689858c65c6a0038d37ccbe190e63f85f4f74300ee5e841dcb8ed391f806000553cac5081347b59e69e2a95b29e658fb201b41b569178b8480131294cafafa11fc1c3dc8cdbbfb8c460d006556b8dbdfeb9dd", 0x7e}], 0x1, 0x0, 0x0, 0xc890}, 0x24040045) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000800)=0x7fff, 0x4) socket(0x9, 0x2, 0xff) r6 = syz_create_resource$futex(&(0x7f0000000840)=0x1) r7 = syz_create_resource$futex(&(0x7f00000008c0)=0x1) futex(r6, 0x1, 0x1, &(0x7f0000000880)={0x0, 0x3938700}, r7, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000900)={0x5, 0xffffffffffffffff, 0x1}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000940)=0x0) mq_notify(r1, &(0x7f0000000980)={0x0, 0xd, 0x0, @tid=r9}) socket$kcm(0x29, 0xd, 0x0) ioctl$UBLK_U_CMD_STOP_DEV(r1, 0xc0207507, &(0x7f00000009c0)={0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000a40)={0x9, 0x7, {r9}, {0xee01}, 0xffffffff00000001, 0x7}) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f0000000a80)={r10, 0xffff, 0x0, 0x0, r11}) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program did not crash bisect: split chunks (needed=true): <1>, <2>, <1>, <2>, <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunk #1 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 30, 3, 4, 18, 30, 10] detailed listing: executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000540)=0x11) readv(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/180, 0xb4}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utimes(&(0x7f00000004c0)='./file0\x00', 0x0) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000080)) r3 = open(&(0x7f0000000040)='.\x00', 0x80080, 0x20) linkat(r3, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) openat$cgroup_int(r3, &(0x7f00000003c0)='cgroup.clone_children\x00', 0x2, 0x0) executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4442, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0xbdcb}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x224, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x1bf, 0x33, @mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xe}, @broadcast, @device_a, @random="29cd1b0efd0f", {0x1, 0xfc}}, 0x2000, 0x5, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0xcf, "2689dbaf9eddac828792c79bbbffc207b95a3baba0ae69794b363c353632c45f3af7e85f9da38c6b8d68f768f3bc6b993b215fc2bfdce4160fc043a176363e973c4c2c55b87bc1798367a58cca8c0885aedad01abb49e5131e592907c3e9b34b859be543c3d72b83d5f9675bcd177ad7ce41954ae0e3baaacd3bd73010b62b338d955a536975cadf647e0e1e06c1c00393e09b2762b2da9e07bdd3dd2d53d41132586f0451b11fee7ae278c46b493aa72f510ee0c1066ccb4eef85750bb43439fcc16013585ba3b660b86f2f07a5b8"}, {0xdd, 0x37, "198ef4264fcad6a40da4347352af2b7c1fb199bac62c768d68f09c3548ccf247a1ad59ed65fee0a1efc3fc30d55ba80d19a0106095f8e5"}, {0xdd, 0x8b, "0c6ac7ff9aee9d587d05d52ea68c912807652b9caa8f506597e61ce201fa5da98068112f0cdaf30073060a424c7643f735807f55fd9003e7b3e8f1a12a2b3642b8b279cc47b539846d7c48c2ba469bff80ae938126ee5429162eaac2390d36fd3ccb493b85efd7a9fb52a0ff7ba0ce6165a461cf21d9410f502a62974c25c9ab1f604c3b4cbff22a11328e"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x224}, 0x1, 0x0, 0x0, 0x4040}, 0x4801) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f00000003c0)={0x6, 0x3, 0x1}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000400)=0xffff) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000480)={0x5, 0x20, [0x3, 0x688, 0x9f2, 0x4], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000004c0), 0x100) write$6lowpan_enable(r3, &(0x7f0000000500)='0', 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x6ce00, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r4, 0x8010aebc, &(0x7f0000000680)={0x80a0000, 0xc000}) r5 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)="2a13e1258fb15379be6602669c61557354cc35ac3d4ecb60939db8b463ae711a6731a999a20ed185182122c689858c65c6a0038d37ccbe190e63f85f4f74300ee5e841dcb8ed391f806000553cac5081347b59e69e2a95b29e658fb201b41b569178b8480131294cafafa11fc1c3dc8cdbbfb8c460d006556b8dbdfeb9dd", 0x7e}], 0x1, 0x0, 0x0, 0xc890}, 0x24040045) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000800)=0x7fff, 0x4) socket(0x9, 0x2, 0xff) r6 = syz_create_resource$futex(&(0x7f0000000840)=0x1) r7 = syz_create_resource$futex(&(0x7f00000008c0)=0x1) futex(r6, 0x1, 0x1, &(0x7f0000000880)={0x0, 0x3938700}, r7, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000900)={0x5, 0xffffffffffffffff, 0x1}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000940)=0x0) mq_notify(r1, &(0x7f0000000980)={0x0, 0xd, 0x0, @tid=r9}) socket$kcm(0x29, 0xd, 0x0) ioctl$UBLK_U_CMD_STOP_DEV(r1, 0xc0207507, &(0x7f00000009c0)={0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000a40)={0x9, 0x7, {r9}, {0xee01}, 0xffffffff00000001, 0x7}) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f0000000a80)={r10, 0xffff, 0x0, 0x0, r11}) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 6, 3, 4, 18, 30, 10] detailed listing: executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000540)=0x11) readv(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/180, 0xb4}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utimes(&(0x7f00000004c0)='./file0\x00', 0x0) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000080)) r3 = open(&(0x7f0000000040)='.\x00', 0x80080, 0x20) linkat(r3, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) openat$cgroup_int(r3, &(0x7f00000003c0)='cgroup.clone_children\x00', 0x2, 0x0) executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event bisect: the chunk can be dropped bisect: split chunk #2 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunk #3 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 6, 3, 18, 30, 10] detailed listing: executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000540)=0x11) readv(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/180, 0xb4}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utimes(&(0x7f00000004c0)='./file0\x00', 0x0) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000080)) r3 = open(&(0x7f0000000040)='.\x00', 0x80080, 0x20) linkat(r3, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) openat$cgroup_int(r3, &(0x7f00000003c0)='cgroup.clone_children\x00', 0x2, 0x0) executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 6, 3, 4, 30, 10] detailed listing: executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000540)=0x11) readv(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/180, 0xb4}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utimes(&(0x7f00000004c0)='./file0\x00', 0x0) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000080)) r3 = open(&(0x7f0000000040)='.\x00', 0x80080, 0x20) linkat(r3, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) openat$cgroup_int(r3, &(0x7f00000003c0)='cgroup.clone_children\x00', 0x2, 0x0) executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program did not crash bisect: split chunk #4 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunks (needed=true): <1, final>, <1>, <1, final>, <1>, <1>, <1, final> bisect: split chunk #1 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunk #3 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunk #4 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 7 programs left: executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000540)=0x11) readv(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/180, 0xb4}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utimes(&(0x7f00000004c0)='./file0\x00', 0x0) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000080)) r3 = open(&(0x7f0000000040)='.\x00', 0x80080, 0x20) linkat(r3, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) openat$cgroup_int(r3, &(0x7f00000003c0)='cgroup.clone_children\x00', 0x2, 0x0) executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) bisect: trying to concatenate bisect: concatenate 7 entries minimizing program #0 before concatenation testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 6, 3, 4, 18, 30, 10] detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000540)=0x11) readv(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/180, 0xb4}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utimes(&(0x7f00000004c0)='./file0\x00', 0x0) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000080)) r3 = open(&(0x7f0000000040)='.\x00', 0x80080, 0x20) linkat(r3, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 6, 3, 4, 18, 30, 10] detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000540)=0x11) readv(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/180, 0xb4}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utimes(&(0x7f00000004c0)='./file0\x00', 0x0) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000080)) open(&(0x7f0000000040)='.\x00', 0x80080, 0x20) executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 6, 3, 4, 18, 30, 10] detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000540)=0x11) readv(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/180, 0xb4}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utimes(&(0x7f00000004c0)='./file0\x00', 0x0) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000080)) executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 6, 3, 4, 18, 30, 10] detailed listing: executing program 0: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000540)=0x11) readv(r1, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/180, 0xb4}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utimes(&(0x7f00000004c0)='./file0\x00', 0x0) executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 6, 3, 4, 18, 30, 10] detailed listing: executing program 0: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000540)=0x11) readv(r1, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/180, 0xb4}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 6, 3, 4, 18, 30, 10] detailed listing: executing program 0: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000540)=0x11) readv(r1, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/180, 0xb4}], 0x1) executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 6, 3, 4, 18, 30, 10] detailed listing: executing program 0: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000540)=0x11) executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 6, 3, 4, 18, 30, 10] detailed listing: executing program 0: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x88002, 0x0) executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 6, 3, 4, 18, 30, 10] detailed listing: executing program 0: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 6, 3, 4, 18, 30, 10] detailed listing: executing program 0: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 6, 3, 4, 18, 30, 10] detailed listing: executing program 0: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x3, "c540c65fac32390a0d6b201b77c04938c87e739213df8a9d2b55c7616a74392e", 0x6, 0x2471, 0x1, 0x8, 0xffffffff, 0x3, 0x1, 0x7, [0x401, 0x8000, 0x5, 0x6]}) executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 6, 3, 4, 18, 30, 10] detailed listing: executing program 0: socket$pppl2tp(0x18, 0x1, 0x1) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 6, 3, 4, 18, 30, 10] detailed listing: executing program 0: socket$pppl2tp(0x18, 0x1, 0x1) executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 3, 4, 18, 30, 10] detailed listing: executing program 0: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event minimized 14 calls -> 0 calls minimizing program #1 before concatenation testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 5, 3, 4, 18, 30, 10] detailed listing: executing program 1: executing program 0: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program did not crash testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 5, 3, 4, 18, 30, 10] detailed listing: executing program 1: executing program 0: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program did not crash testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 5, 3, 4, 18, 30, 10] detailed listing: executing program 1: executing program 0: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program did not crash testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 5, 3, 4, 18, 30, 10] detailed listing: executing program 1: executing program 0: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program did not crash testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 5, 3, 4, 18, 30, 10] detailed listing: executing program 1: executing program 0: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program did not crash testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 5, 3, 4, 18, 30, 10] detailed listing: executing program 1: executing program 0: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r0 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r0, 0xc018480d, 0x0) executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x99, 0x8801, 0x0, 0x0}], 0x1}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program did not crash minimized 6 calls -> 6 calls minimizing program #2 before concatenation testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 2, 4, 18, 30, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 1, 4, 18, 30, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 4, 18, 30, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 0: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x600000000000000, 0x0, 0x42004}, 0x80000) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event minimized 3 calls -> 0 calls minimizing program #3 before concatenation testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 3, 18, 30, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 2, 18, 30, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 1, 18, 30, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 0: socket$nl_generic(0x10, 0x3, 0x10) executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 18, 30, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 0: executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event minimized 4 calls -> 0 calls minimizing program #4 before concatenation testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 17, 30, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 16, 30, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 15, 30, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 14, 30, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 13, 30, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 12, 30, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program did not crash testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 12, 30, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 11, 30, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000800)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5000000]}}], 0xffc8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 10, 30, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000640)={0x3, 0x0, 0x0, 'queue1\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 9, 30, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x42002) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 8, 30, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 7, 30, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 6, 30, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 5, 30, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 4, 30, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 3, 30, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 2, 30, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 30, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 0: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) socket$nl_route(0x10, 0x3, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event minimized 18 calls -> 1 calls minimizing program #5 before concatenation testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 29, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) unshare(0x8040480) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 28, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 27, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {0x0}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r9}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], 0x68}, 0x1, 0x0, 0x0, 0x24008850}, 0x40) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 26, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r8}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 25, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r8}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 24, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r8}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) socket$nl_netfilter(0x10, 0x3, 0xc) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 23, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r8}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 22, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r8}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) socket$nl_netfilter(0x10, 0x3, 0xc) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 21, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r8}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) ioctl$TCSETS(r7, 0x5402, &(0x7f00000000c0)={0xfff, 0x72cd, 0xfffff298, 0x4, 0x14, "34026543849669433558949a216f3a92665ff3"}) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 20, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r8}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 19, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r8}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) socket$nl_netfilter(0x10, 0x3, 0xc) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 18, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r8}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 17, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r8}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 16, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r8}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 15, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r8}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 14, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r8}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 13, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000005c0)=@mmap={0x1, 0x2, 0x4, 0x800, 0x81, {}, {0x3, 0x8, 0x8, 0x5, 0x5, 0x8, "24d9bfb8"}, 0x0, 0x1, {}, 0x3ff, 0x0, r8}) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 12, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000540)=@mmap={0x1, 0x3, 0x4, 0x100000, 0x9, {}, {0x0, 0x0, 0x5c, 0xc0, 0x0, 0x4, "00001004"}, 0x1, 0x1, {}, 0x1}) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 11, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000500)={0x1, 0x2, 0x1, 0x0, 0x2}) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 10, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 9, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 8, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 7, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2000, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80, 0x8200, 0x2, 0x368, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 6, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 5, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 4, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 3, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000002200), &(0x7f0000000280), &(0x7f0000000140)) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 2, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 1, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 0, 10] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 0: executing program 1: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000808) program crashed: general protection fault in saitek_event minimized 30 calls -> 0 calls minimizing program #6 before concatenation testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 0, 9] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 2: executing program 0: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 0, 8] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 2: executing program 0: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 0, 7] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 2: executing program 0: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 0, 6] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 2: executing program 0: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 0, 5] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 2: executing program 0: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 0, 4] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 2: executing program 0: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 0, 3] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 2: executing program 0: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 0, 2] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 2: executing program 0: socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 0, 1] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 2: executing program 0: socket$inet6_mptcp(0xa, 0x1, 0x106) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0, 0, 1, 0, 0] detailed listing: executing program 1: executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) executing program 1: executing program 3: executing program 3: madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 2: executing program 0: program crashed: general protection fault in saitek_event minimized 10 calls -> 0 calls testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGUCODE-madvise detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) program crashed: general protection fault in saitek_event bisect: concatenation succeeded found reproducer with 7 syscalls minimizing guilty program testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGUCODE detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) program did not crash testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-ioctl$HIDIOCGUCODE detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) program did not crash testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGUCODE detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) program did not crash testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGUCODE detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) program did not crash testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGUCODE detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) program did not crash testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGUCODE detailed listing: executing program 0: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r0 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r0, 0xc018480d, 0x0) program did not crash testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGUCODE detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) program did not crash testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGUCODE detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) program did not crash testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGUCODE detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) program did not crash testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGUCODE detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) program did not crash testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGUCODE detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) program did not crash testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGUCODE detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) program did not crash testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGUCODE detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) program did not crash testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGUCODE detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(0x0, 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGUCODE program crashed: general protection fault in saitek_event simplifying C reproducer testing compiled C program (duration=46.5s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGUCODE program did not crash testing compiled C program (duration=46.5s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGUCODE program crashed: general protection fault in saitek_event testing compiled C program (duration=46.5s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGUCODE program crashed: general protection fault in saitek_event testing compiled C program (duration=46.5s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGUCODE program crashed: general protection fault in saitek_event testing compiled C program (duration=46.5s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGUCODE program crashed: general protection fault in saitek_event testing compiled C program (duration=46.5s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGUCODE program crashed: general protection fault in saitek_event testing compiled C program (duration=46.5s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGUCODE program crashed: general protection fault in saitek_event testing compiled C program (duration=46.5s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGUCODE program crashed: general protection fault in saitek_event testing program (duration=46.5s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGUCODE detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) program crashed: general protection fault in saitek_event validation run: crashed=true testing program (duration=46.5s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGUCODE detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) program crashed: general protection fault in saitek_event validation run: crashed=true testing program (duration=46.5s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_open_dev$hiddev-ioctl$HIDIOCGUCODE detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308103c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x1, "8d"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) program crashed: general protection fault in saitek_event validation run: crashed=true reproducing took 3h21m37.130045137s repro crashed as (corrupted=false): Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 RIP: 0010:saitek_event+0x51/0x2b0 drivers/hid/hid-saitek.c:154 Code: aa f8 49 83 c6 78 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 4d 5a 1b f9 4d 8b 36 49 83 c6 18 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 30 5a 1b f9 49 8b 06 48 89 04 24 RSP: 0018:ffffc90000007830 EFLAGS: 00010006 RAX: 0000000000000003 RBX: ffff888075fee388 RCX: ffffffff8fa8f000 RDX: 0000000000000100 RSI: 0000000000000100 RDI: ffff88805bed4000 RBP: 000000000000008d R08: 0000000000000000 R09: 0000000000000000 R10: ffff888075fee3a8 R11: ffffffff891d95c0 R12: ffffffff910c0c68 R13: dffffc0000000000 R14: 0000000000000018 R15: ffff88805bed4000 FS: 0000000000000000(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f2fcd029ff8 CR3: 0000000077e20000 CR4: 00000000003526f0 Call Trace: hid_process_event+0x436/0x620 drivers/hid/hid-core.c:1572 hid_process_report drivers/hid/hid-core.c:1730 [inline] hid_report_raw_event+0xf6a/0x1900 drivers/hid/hid-core.c:2109 __hid_input_report+0x454/0x580 drivers/hid/hid-core.c:2180 hid_ctrl+0x204/0x580 drivers/hid/usbhid/hid-core.c:486 __usb_hcd_giveback_urb+0x378/0x540 drivers/usb/core/hcd.c:1657 dummy_timer+0xa91/0x4cc0 drivers/usb/gadget/udc/dummy_hcd.c:2023 __run_hrtimer kernel/time/hrtimer.c:2074 [inline] __hrtimer_run_queues+0x3bc/0xa10 kernel/time/hrtimer.c:2131 hrtimer_run_softirq+0x1e3/0x2e0 kernel/time/hrtimer.c:2148 handle_softirqs+0x226/0x860 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] invoke_softirq kernel/softirq.c:519 [inline] __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:finish_task_switch+0x413/0xc60 kernel/sched/core.c:5384 Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 77 4f 55 0a e8 12 2f 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 18 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 RSP: 0018:ffffffff8fa07a40 EFLAGS: 00000206 RAX: 00000000000ad9eb RBX: ffff8880b843c8e0 RCX: 8000000000000001 RDX: 0000000000000000 RSI: ffffffff8e4696a9 RDI: ffffffff8c6dde80 RBP: ffffffff8fa07a90 R08: ffffffff917a727f R09: 1ffffffff22f4e4f R10: dffffc0000000000 R11: fffffbfff22f4e50 R12: ffffffff8fa8f000 R13: ffffffff8fa8f000 R14: dffffc0000000000 R15: 1ffff1101708791c context_switch kernel/sched/core.c:5536 [inline] __schedule+0x17e3/0x58f0 kernel/sched/core.c:7284 schedule_idle+0x51/0x90 kernel/sched/core.c:7402 do_idle+0x4ad/0x540 kernel/sched/idle.c:384 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:454 rest_init+0x378/0x3a0 init/main.c:732 start_kernel+0x392/0x3e0 init/main.c:1190 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310 x86_64_start_kernel+0x137/0x1b0 arch/x86/kernel/head64.c:291 common_startup_64+0x13e/0x157 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:saitek_event+0x51/0x2b0 drivers/hid/hid-saitek.c:154 Code: aa f8 49 83 c6 78 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 4d 5a 1b f9 4d 8b 36 49 83 c6 18 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 30 5a 1b f9 49 8b 06 48 89 04 24 RSP: 0018:ffffc90000007830 EFLAGS: 00010006 RAX: 0000000000000003 RBX: ffff888075fee388 RCX: ffffffff8fa8f000 RDX: 0000000000000100 RSI: 0000000000000100 RDI: ffff88805bed4000 RBP: 000000000000008d R08: 0000000000000000 R09: 0000000000000000 R10: ffff888075fee3a8 R11: ffffffff891d95c0 R12: ffffffff910c0c68 R13: dffffc0000000000 R14: 0000000000000018 R15: ffff88805bed4000 FS: 0000000000000000(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f2fcd029ff8 CR3: 0000000077e20000 CR4: 00000000003526f0 ---------------- Code disassembly (best guess): 0: aa stos %al,%es:(%rdi) 1: f8 clc 2: 49 83 c6 78 add $0x78,%r14 6: 4c 89 f0 mov %r14,%rax 9: 48 c1 e8 03 shr $0x3,%rax d: 42 80 3c 28 00 cmpb $0x0,(%rax,%r13,1) 12: 74 08 je 0x1c 14: 4c 89 f7 mov %r14,%rdi 17: e8 4d 5a 1b f9 call 0xf91b5a69 1c: 4d 8b 36 mov (%r14),%r14 1f: 49 83 c6 18 add $0x18,%r14 23: 4c 89 f0 mov %r14,%rax 26: 48 c1 e8 03 shr $0x3,%rax * 2a: 42 80 3c 28 00 cmpb $0x0,(%rax,%r13,1) <-- trapping instruction 2f: 74 08 je 0x39 31: 4c 89 f7 mov %r14,%rdi 34: e8 30 5a 1b f9 call 0xf91b5a69 39: 49 8b 06 mov (%r14),%rax 3c: 48 89 04 24 mov %rax,(%rsp) final repro crashed as (corrupted=false): Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 RIP: 0010:saitek_event+0x51/0x2b0 drivers/hid/hid-saitek.c:154 Code: aa f8 49 83 c6 78 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 4d 5a 1b f9 4d 8b 36 49 83 c6 18 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 30 5a 1b f9 49 8b 06 48 89 04 24 RSP: 0018:ffffc90000007830 EFLAGS: 00010006 RAX: 0000000000000003 RBX: ffff888075fee388 RCX: ffffffff8fa8f000 RDX: 0000000000000100 RSI: 0000000000000100 RDI: ffff88805bed4000 RBP: 000000000000008d R08: 0000000000000000 R09: 0000000000000000 R10: ffff888075fee3a8 R11: ffffffff891d95c0 R12: ffffffff910c0c68 R13: dffffc0000000000 R14: 0000000000000018 R15: ffff88805bed4000 FS: 0000000000000000(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f2fcd029ff8 CR3: 0000000077e20000 CR4: 00000000003526f0 Call Trace: hid_process_event+0x436/0x620 drivers/hid/hid-core.c:1572 hid_process_report drivers/hid/hid-core.c:1730 [inline] hid_report_raw_event+0xf6a/0x1900 drivers/hid/hid-core.c:2109 __hid_input_report+0x454/0x580 drivers/hid/hid-core.c:2180 hid_ctrl+0x204/0x580 drivers/hid/usbhid/hid-core.c:486 __usb_hcd_giveback_urb+0x378/0x540 drivers/usb/core/hcd.c:1657 dummy_timer+0xa91/0x4cc0 drivers/usb/gadget/udc/dummy_hcd.c:2023 __run_hrtimer kernel/time/hrtimer.c:2074 [inline] __hrtimer_run_queues+0x3bc/0xa10 kernel/time/hrtimer.c:2131 hrtimer_run_softirq+0x1e3/0x2e0 kernel/time/hrtimer.c:2148 handle_softirqs+0x226/0x860 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] invoke_softirq kernel/softirq.c:519 [inline] __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:finish_task_switch+0x413/0xc60 kernel/sched/core.c:5384 Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 77 4f 55 0a e8 12 2f 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 18 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 RSP: 0018:ffffffff8fa07a40 EFLAGS: 00000206 RAX: 00000000000ad9eb RBX: ffff8880b843c8e0 RCX: 8000000000000001 RDX: 0000000000000000 RSI: ffffffff8e4696a9 RDI: ffffffff8c6dde80 RBP: ffffffff8fa07a90 R08: ffffffff917a727f R09: 1ffffffff22f4e4f R10: dffffc0000000000 R11: fffffbfff22f4e50 R12: ffffffff8fa8f000 R13: ffffffff8fa8f000 R14: dffffc0000000000 R15: 1ffff1101708791c context_switch kernel/sched/core.c:5536 [inline] __schedule+0x17e3/0x58f0 kernel/sched/core.c:7284 schedule_idle+0x51/0x90 kernel/sched/core.c:7402 do_idle+0x4ad/0x540 kernel/sched/idle.c:384 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:454 rest_init+0x378/0x3a0 init/main.c:732 start_kernel+0x392/0x3e0 init/main.c:1190 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310 x86_64_start_kernel+0x137/0x1b0 arch/x86/kernel/head64.c:291 common_startup_64+0x13e/0x157 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:saitek_event+0x51/0x2b0 drivers/hid/hid-saitek.c:154 Code: aa f8 49 83 c6 78 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 4d 5a 1b f9 4d 8b 36 49 83 c6 18 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 30 5a 1b f9 49 8b 06 48 89 04 24 RSP: 0018:ffffc90000007830 EFLAGS: 00010006 RAX: 0000000000000003 RBX: ffff888075fee388 RCX: ffffffff8fa8f000 RDX: 0000000000000100 RSI: 0000000000000100 RDI: ffff88805bed4000 RBP: 000000000000008d R08: 0000000000000000 R09: 0000000000000000 R10: ffff888075fee3a8 R11: ffffffff891d95c0 R12: ffffffff910c0c68 R13: dffffc0000000000 R14: 0000000000000018 R15: ffff88805bed4000 FS: 0000000000000000(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f2fcd029ff8 CR3: 0000000077e20000 CR4: 00000000003526f0 ---------------- Code disassembly (best guess): 0: aa stos %al,%es:(%rdi) 1: f8 clc 2: 49 83 c6 78 add $0x78,%r14 6: 4c 89 f0 mov %r14,%rax 9: 48 c1 e8 03 shr $0x3,%rax d: 42 80 3c 28 00 cmpb $0x0,(%rax,%r13,1) 12: 74 08 je 0x1c 14: 4c 89 f7 mov %r14,%rdi 17: e8 4d 5a 1b f9 call 0xf91b5a69 1c: 4d 8b 36 mov (%r14),%r14 1f: 49 83 c6 18 add $0x18,%r14 23: 4c 89 f0 mov %r14,%rax 26: 48 c1 e8 03 shr $0x3,%rax * 2a: 42 80 3c 28 00 cmpb $0x0,(%rax,%r13,1) <-- trapping instruction 2f: 74 08 je 0x39 31: 4c 89 f7 mov %r14,%rdi 34: e8 30 5a 1b f9 call 0xf91b5a69 39: 49 8b 06 mov (%r14),%rax 3c: 48 89 04 24 mov %rax,(%rsp)