Extracting prog: 1h19m39.582547838s Minimizing prog: 1h1m59.613953807s Simplifying prog options: 0s Extracting C: 47.211376971s Simplifying C: 12m48.241317176s extracting reproducer from 44 programs testing a last program of every proc single: executing 9 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_icmp_raw-setsockopt$EBT_SO_SET_ENTRIES detailed listing: executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x2, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x298) program did not crash program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$nl_route_sched-ioctl$KVM_CREATE_VM-ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL-socket$nl_generic-syz_usb_connect-setsockopt$IP6T_SO_SET_REPLACE-mprotect-unshare-mmap$IORING_OFF_SQ_RING-socket$inet6_tcp-ioctl$sock_SIOCETHTOOL-sendmsg$nl_generic-prctl$PR_SCHED_CORE-syz_ublk_setup_io_uring-syz_ublk_add_dev-socket$inet6_tcp-syz_open_dev$media-ioctl$MEDIA_IOC_REQUEST_ALLOC-dup-syz_ublk_setup_queues-ioctl$MEMREADOOB-sendmsg$nl_xfrm-syz_io_uring_modify_offsets$flags-sendmsg$nl_route-syz_usb_connect-syz_ublk_add_dev-ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE-ioctl$UFFDIO_REGISTER detailed listing: executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x12, 0x0, {0xc, 0xd}, {0xc, 0x5}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048810}, 0x2000000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f00000005c0)={0xdf, 0x0, 0x80000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x4, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001b80)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0x270, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) mprotect(&(0x7f0000e15000/0x2000)=nil, 0x2000, 0x2) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000001f80)={'ip6_vti0\x00', &(0x7f0000001fc0)=@ethtool_cmd={0x41, 0x5, 0x3, 0x0, 0x7, 0x0, 0x0, 0xfc, 0x0, 0xfc, 0x0, 0xfffffff9, 0x0, 0xff, 0x0, 0x45, [0x0, 0x6]}}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f0000019100400014000200100011"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000100)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000240)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x1, 0x5f6, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x24}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_open_dev$media(&(0x7f00000003c0), 0x6be, 0xc8683) ioctl$MEDIA_IOC_REQUEST_ALLOC(r10, 0x80047c05, &(0x7f0000000480)) r11 = dup(r9) syz_ublk_setup_queues(r11, r8, &(0x7f0000000340)={0x0, 0x20fb87, 0x1, 0xfffffffd, 0x32c}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xba5e, 0x8000, 0x1006, 0x160, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6605, 0x200, 0x10000000, 0x546}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88db, 0x10000, 0x3, 0xfffffffc, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000000, 0x8000, 0x2, 0xbd, 0x0, r3}}], 0x1, &(0x7f0000000540)={0x2e, 0x54, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r7, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) ioctl$MEMREADOOB(r11, 0xc0104d04, &(0x7f0000000500)={0x6, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_modify_offsets$flags(r4, r12, 0x38, 0xfffffffa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x14) syz_usb_connect(0x3, 0x96d, &(0x7f0000000a80)=ANY=[@ANYBLOB="12010102e21b5140b1134200e8a90102030109025b09040d9720090904320409f073ea09090503002000f80040090504104000"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r11, 0x7b2, &(0x7f0000001b40)={&(0x7f0000000b40)=[0x5, 0xaa4, 0xdb, 0x7, 0xd, 0x800, 0x401, 0xf, 0x4, 0x6, 0x800, 0x40, 0x6, 0x4, 0xfffffffe, 0x40d, 0xff, 0x1, 0xc6, 0x100, 0x6, 0x3, 0x80000001, 0xbfb, 0x2, 0x6, 0x8, 0x6, 0x5, 0x64fe2241, 0x6, 0x5, 0x8, 0x8, 0x8b, 0x2, 0x69, 0x3, 0x6, 0xadb433a, 0x10000, 0xffff96d0, 0x0, 0x0, 0x0, 0x2, 0x1000, 0x401, 0x5, 0x0, 0x8001, 0x400, 0x2, 0x5, 0x80, 0x400, 0x5, 0x9, 0x80000001, 0x10001, 0x9, 0x4, 0x8000, 0x7, 0x1, 0x7, 0xffff8000, 0xfffffff7, 0x5, 0x6, 0x0, 0x1, 0xfffffffc, 0x7, 0x7ff, 0x8000, 0x4, 0x2, 0x6, 0x0, 0x2, 0x2, 0x86b, 0x3, 0x5, 0x65c8049d, 0x8, 0x8, 0x6, 0x2, 0xe1, 0x9, 0x6, 0x4, 0x0, 0x3, 0x5, 0x101, 0x9, 0x3, 0x0, 0x0, 0x2, 0x3, 0x3, 0x80000001, 0x5664, 0x80, 0x75, 0x3, 0x8, 0xee, 0x8000, 0x1, 0x10000, 0x7f, 0xa4c, 0x5, 0x80, 0xb, 0x8, 0xb, 0xd, 0xfffffffe, 0x9, 0x1432, 0x0, 0x0, 0x6, 0x1, 0xdb71, 0xffff, 0x4, 0x101, 0x3, 0xc3b9, 0x1, 0x2, 0xb1e4, 0x9, 0x3, 0xe, 0x80000001, 0x8, 0x401, 0x1, 0x7, 0x2, 0x385, 0xde, 0xab84, 0xde, 0x8001, 0x7, 0x7, 0x8000, 0x9, 0x2, 0x2, 0x9, 0x2, 0x5, 0x9, 0x0, 0x6, 0x2, 0x5, 0x81, 0x1000, 0x7, 0x4, 0x40, 0x2, 0x8, 0x10000, 0x9, 0xfffffffe, 0x2, 0xfffffffb, 0x5, 0x1, 0x1, 0x10, 0x2549, 0x5, 0x200, 0x0, 0xeb2, 0x3, 0x2, 0x2, 0xc, 0x6, 0x3ff, 0xffffe3dc, 0x2, 0x9, 0x8, 0xffffdd5e, 0x80, 0xfff, 0x2, 0x1, 0x0, 0x200, 0xe48d, 0xfffff8ee, 0xb1, 0x81, 0xeb, 0x3, 0x0, 0x1, 0x80000001, 0x5, 0x1ff, 0x7, 0x7, 0x5, 0x2, 0x6a38bf39, 0x6, 0x7ff, 0x1bb800, 0x7, 0x5, 0x4, 0x3ff, 0x81, 0x8000, 0x7f, 0x66, 0xffffffff, 0x80, 0x9, 0x0, 0x226a, 0x8, 0x4, 0x790, 0x0, 0xffff8001, 0x8f, 0xbbf, 0x5, 0xffff, 0x9, 0xb83, 0x5, 0x0, 0x6, 0x4, 0x3b, 0x2, 0x8001, 0x8, 0xb9e, 0x6, 0x3, 0x0, 0x9, 0x6, 0x3, 0xfffffff9, 0x7ff, 0x100, 0x0, 0x81, 0x3ff, 0x8, 0x400, 0x9, 0x4, 0x7, 0x8, 0x6, 0x11, 0x1, 0xfffffffd, 0x5, 0xe7cb, 0x3, 0x5, 0xc, 0xff, 0x400, 0x4, 0xb30, 0xe4, 0x7fffffff, 0x9, 0x7, 0xa, 0x1afa, 0x2, 0x6, 0x2, 0x6, 0x1, 0x5, 0x9, 0x2, 0x8001, 0xe, 0x1, 0xfffffffe, 0x2, 0x0, 0x7, 0x66, 0xfffffffa, 0x5, 0x6, 0xe, 0x4, 0x2, 0xe38, 0x3, 0x80, 0xdb23, 0x1, 0x6456, 0x6000000, 0x8, 0xffff, 0x9, 0x0, 0x8d, 0x56, 0xb, 0x2, 0x4, 0x7ff, 0x8, 0x0, 0x9, 0x2f, 0x7, 0x1, 0x1, 0x3, 0x4, 0x4, 0x80, 0x4, 0x9, 0x3, 0xffffff5b, 0x5, 0x48f, 0x7, 0x0, 0xb753, 0xb7a6, 0xfff, 0x2, 0x9, 0x9, 0x6, 0x3, 0x4, 0x20, 0xe223, 0x80, 0x5, 0xfffffffe, 0x1, 0xfffffffb, 0x100, 0x3, 0x115d, 0xfffffff9, 0x5, 0x2, 0x5, 0x7, 0x6236a69d, 0x1, 0xffffffff, 0x0, 0x0, 0x1, 0x8c, 0x4, 0x8, 0xc, 0x77, 0x9, 0xf, 0x6, 0x1d7, 0x6, 0x9, 0xffffffff, 0x7, 0xf2, 0x5, 0x9, 0x3, 0x3, 0x9, 0x0, 0xc, 0x1, 0x3, 0x1, 0x2, 0x3, 0x1, 0xe0, 0x6, 0x9, 0x9, 0x7, 0x7fff, 0x80000001, 0xa429, 0x6, 0xf20, 0x7fffffff, 0x8, 0x2, 0x0, 0x100, 0x6, 0x7, 0x7, 0x6, 0x7, 0x6, 0x8, 0x8, 0x6, 0x7, 0x0, 0xc06, 0x9, 0xf0, 0x6, 0x7ff, 0xe00, 0x12a4, 0x0, 0x3, 0x8ae0, 0xffffffe7, 0x2, 0x4, 0x9, 0x0, 0x80, 0x10001, 0x7, 0x4, 0x8, 0x4, 0x5, 0x4, 0x4, 0x4, 0xf3, 0xfffffffe, 0x5, 0x0, 0xe22, 0x67, 0x7, 0x0, 0x6, 0x2, 0x1, 0x1, 0x9, 0x4, 0x4d, 0x0, 0x0, 0x55, 0x8000, 0xfd, 0xfffffff7, 0x9, 0x10001, 0x10000, 0x81e, 0xaaa0, 0x3, 0xc60, 0x88, 0x10a6, 0x8, 0xef9f, 0x7, 0x7fff, 0x5, 0x6, 0x8e8, 0x200, 0x0, 0x7ff, 0x0, 0x3, 0x100, 0x1, 0x2, 0x2, 0x0, 0x6, 0x0, 0x5cb6, 0x5, 0x0, 0x7e64, 0x0, 0x3, 0x5, 0x9, 0x254, 0xb86, 0x1ab2e81, 0x30ba, 0xb772, 0xd, 0x6, 0x5, 0x8000, 0x0, 0x0, 0x1, 0x2, 0x67db375a, 0x7fff, 0x80000001, 0x4, 0x9, 0x5, 0x8, 0x3, 0xb00e, 0xf0b, 0x833, 0x5b, 0x3, 0x40, 0x80000001, 0xb, 0x4, 0x2, 0x0, 0x9, 0xf, 0x6, 0x200, 0x1, 0x5, 0x6, 0x7, 0x1ff, 0x8, 0x18, 0xc90, 0x6, 0x0, 0x8, 0x9, 0x800, 0x3, 0x7, 0x1000, 0xc, 0x6, 0x7, 0xfff, 0x9, 0x7fff8000, 0x1, 0xff800000, 0xca, 0x6, 0x3, 0x2, 0x8, 0x5, 0x5, 0xfffffffe, 0x10001, 0x400, 0x3, 0xffffffae, 0x4, 0x3, 0x7, 0x2, 0x9, 0xfffffbff, 0x0, 0x0, 0x4, 0x4, 0x3, 0x5, 0x7, 0x0, 0x1, 0x7, 0x8, 0x7, 0x5, 0x5, 0x404, 0x8, 0x7, 0x9, 0x5, 0x4d1, 0x6, 0x80000000, 0x5, 0x9f, 0x4, 0xfffffff8, 0x7ff, 0x2, 0x40000000, 0xc3, 0xa293, 0x2, 0x9, 0xd, 0x8, 0x3, 0x1fed, 0x8, 0x1, 0x9, 0x3, 0x1, 0xb0, 0x5, 0x42d, 0xfffffff9, 0x4, 0x8001, 0x51, 0x80, 0x6, 0x6, 0x100, 0x0, 0x7, 0x93dd, 0x6, 0x13, 0x81, 0x8, 0x81, 0x2b, 0x0, 0x5, 0x2, 0x2, 0xc3c, 0x4, 0x2, 0x9, 0x4, 0x6, 0x2, 0x8, 0x2, 0x3b, 0x5, 0x0, 0x5, 0x6, 0xf, 0x37, 0xffff, 0xb9, 0xca12, 0x324bc677, 0x0, 0x9, 0xffff, 0xf5, 0x7ff, 0x40, 0x101, 0x0, 0x8, 0x400, 0xbd, 0x0, 0x5, 0x1, 0x3, 0x80, 0x800, 0x4, 0x7f, 0x1, 0x8, 0x7, 0x2, 0x0, 0x6, 0xfffffffa, 0x8, 0xff6, 0x8000000, 0x9, 0x6, 0x8, 0x6, 0x0, 0x4, 0x5, 0x4, 0x0, 0x138a, 0x0, 0x7f, 0x0, 0xfffffff8, 0x1, 0x0, 0x6, 0x2, 0x6, 0x8f, 0x5, 0x3a, 0x8, 0xc0, 0x6a3b, 0x2, 0xffffff86, 0x35, 0x2, 0x8, 0x4, 0xa, 0x2, 0x1, 0x7f000, 0x8, 0x449, 0x9, 0x200, 0x8, 0x86, 0x4, 0x800, 0x4, 0xffff, 0x8, 0x2, 0x5, 0x9, 0x200, 0x6, 0x67, 0xffffffff, 0xfff, 0x3, 0x8, 0x8000, 0x2, 0x12a, 0x8, 0x6, 0x8, 0x25, 0x5, 0x38, 0x5, 0x8, 0x4, 0x39, 0x9745, 0xa2a, 0x81, 0x7, 0x6, 0x4, 0x4, 0xfffffff7, 0x516f, 0x8, 0x1, 0x400, 0x3ff, 0x360, 0x2b0c2d27, 0x0, 0x2, 0x101, 0x12, 0x3, 0xdea, 0x3, 0x6a, 0x1ff, 0x2, 0x6, 0xfffffff8, 0x8001, 0x5, 0x401, 0x2, 0x2, 0x0, 0x1, 0x0, 0x200, 0x10, 0x9, 0x9, 0x3, 0x3, 0x1, 0x3, 0xd, 0x2e0, 0x401, 0x8000, 0x0, 0xae, 0x4, 0x4, 0x6, 0x9f58, 0x9, 0x8, 0x1, 0x2, 0x9, 0x8, 0x2, 0x9, 0x2, 0x20, 0x4, 0xf, 0x401, 0x1, 0x401, 0x3, 0x0, 0x3, 0xc, 0x800, 0x28000000, 0x3, 0x5af9, 0x0, 0xb6c, 0x8, 0xb907, 0x4, 0x7, 0xffff2d21, 0x485, 0x1000, 0x6, 0x4, 0x1, 0x81, 0x2, 0xbd1e, 0x6, 0x33, 0xd, 0x80, 0x8, 0xf9, 0x7fffffff, 0x10001, 0x11, 0x1, 0xe, 0x0, 0x4, 0x9, 0xffffffff, 0x7, 0x9, 0x5, 0x7f1f, 0x7, 0x7, 0x8, 0x3, 0x7, 0xc, 0x7, 0x3, 0x0, 0x2, 0x40, 0xd, 0x9, 0x9, 0x200, 0x40, 0x31cc, 0xffff56d2, 0x20000000, 0xfff, 0x9, 0x5, 0x5, 0xfffffff9, 0x0, 0xff, 0x100, 0x3, 0x6, 0x0, 0x8b, 0x200, 0x80, 0x2, 0xffff, 0x8001, 0xd8c7378, 0x1, 0x4, 0x0, 0x5, 0x3, 0x3, 0x1, 0xdc5e, 0x0, 0x4, 0x3b, 0xffff, 0x1, 0xffffffff, 0xffff, 0x1, 0x400, 0x0, 0x2, 0x5, 0x1000, 0x8000, 0xfffffeff, 0x620a, 0x5, 0x2, 0x0, 0x8, 0x4, 0xdc, 0x2, 0xe, 0x7, 0x140000, 0xfffffff7, 0x1ff, 0x0, 0xb, 0xfd, 0xdd18, 0x0, 0x1, 0x40, 0x5, 0x7c43, 0x4, 0x2c, 0xffff, 0x8, 0x6, 0x200, 0x9, 0xffff, 0x9f, 0x6, 0x3, 0x100, 0x2, 0x9, 0x2, 0x9, 0x1, 0x100, 0x7, 0x5, 0xe, 0x24, 0x8001, 0x6, 0x8000, 0x3, 0xf2, 0x2, 0x1, 0x10001, 0xdeca, 0x4, 0xea, 0x6, 0x3, 0x8, 0x7ff, 0x9, 0x0, 0x8, 0x5b, 0x9, 0x4, 0xff, 0xbf02, 0x2e90a212, 0x40000c, 0x8, 0x20000000, 0x6, 0xffff, 0xfffff801, 0x2], 0x2, 0x400, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000b00)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x16b8c5b5213a03b5}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$uac2-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000500)=ANY=[@ANYBLOB="120110030000004035120182400001020301090286080000003009080b00010107208c0904000000010120000924010040041d000708240a0001ff23030c240302"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="004e82a3adfc8c4409e6f5030400000004034308"], 0x0, 0x0, 0x0}, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-openat-write-syz_usb_connect-syz_usb_control_io$printer-syz_usb_control_io$printer-socket$xdp-socket$unix-bind$unix detailed listing: executing program 0: madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r0, &(0x7f0000000740)='0', 0x1) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\t/'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000780)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-socket$nl_generic-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK-sched_setaffinity-bpf$PROG_LOAD-socket-ioctl$FS_IOC_SETFSLABEL-openat$binderfs-socket$nl_generic-syz_genetlink_get_family_id$nl80211-ioctl$BINDER_SET_CONTEXT_MGR_EXT-openat$binderfs-ioctl$BINDER_WRITE_READ-dup3-openat$binderfs-mmap$binder-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-socket$inet6-shutdown-recvmmsg-unshare-socket$igmp-setsockopt$MRT_ADD_MFC-setsockopt$MRT_INIT-socket-sendmsg$nl_generic detailed listing: executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r2, @ANYBLOB="5c005a80140001800500070001000000050006000100000044000380120001000c"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000000c0)="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") r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0x3}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffe0f, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r8 = socket$inet6(0xa, 0x2, 0x0) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f0000008880), 0x45b, 0x2, 0x0) unshare(0x62020400) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r9, 0x0, 0x5, &(0x7f0000000240)={@loopback, @multicast2, 0xfffb, "66c5aff8a7eb17f1f6cec2e7780795478c84aea31700", 0x96bf, 0x2, 0x7a, 0x6b}, 0x3c) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000000), 0x4) socket(0x10, 0x3, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4001010) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet6_udp-sendmmsg$unix-syz_open_procfs-pread64-recvmmsg-sched_setattr-sendmmsg-socket-socket$inet6_tcp-close-socket$inet6_mptcp-bind$inet6-listen-socket$inet_smc-connect$inet-accept-connect$inet-sendmmsg$inet-mlock-mlock2-io_uring_setup-syz_create_resource$binfmt-write$binfmt_script-close-write$uinput_user_dev-execveat$binfmt-socket$inet-bpf$PROG_LOAD detailed listing: executing program 0: socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') pread64(r0, &(0x7f0000000040)=""/227, 0xe3, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x5, 0x8, 0x1, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0x2}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x800) r1 = socket(0x840000000002, 0x3, 0x100) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) accept(r3, 0x0, 0x0) connect$inet(r1, &(0x7f0000000580)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f00000005c0), 0x4000095, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) io_uring_setup(0x20006d15, &(0x7f00000007c0)={0x0, 0xcc52, 0x200, 0x80001, 0x10c}) r5 = syz_create_resource$binfmt(0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000880)={'#! ', './file1'}, 0xb) close(0xffffffffffffffff) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {0xe, 0xfff, 0x9, 0x1}, 0x15, [0x28, 0x1, 0x81, 0xf0, 0x7b, 0x1, 0x3, 0x6, 0x4, 0x4, 0x3, 0x4, 0x8, 0x311, 0x2c60, 0x0, 0x6, 0x8001, 0xfffff800, 0x800, 0x8001, 0xfffffffa, 0x0, 0x5, 0x1, 0xfe01, 0x5, 0xfd4, 0x0, 0x2, 0x8ffd, 0x1000, 0x9, 0x7, 0x81, 0x8, 0xffffffff, 0x54, 0x9, 0x9, 0x8, 0x649, 0xfffffff7, 0x9, 0xd, 0x9, 0x5, 0xb, 0x2, 0x1, 0x306f, 0x24, 0xffff0001, 0x80000000, 0x6, 0x2, 0x80000001, 0x101, 0x80, 0xc0000000, 0x80, 0x9, 0x1, 0xcdb1], [0x6, 0xc260, 0x1, 0x6, 0x64b, 0x2, 0x9, 0x4, 0x1, 0x4, 0x7, 0x2, 0x93a, 0x4cc, 0x5, 0xd284, 0x7, 0xffff, 0x8, 0x7, 0xfffffff9, 0x3, 0x4, 0x6, 0x8, 0x2b16, 0xffff, 0x4, 0x7ff, 0x464, 0x0, 0x8, 0x6, 0x5, 0x3, 0x6, 0x0, 0xfffffff8, 0x7, 0xe0000000, 0x1c3, 0x80, 0x6, 0x0, 0x1, 0x12b4, 0x7, 0x1, 0x4, 0x3, 0xd, 0xffffffff, 0x49e7, 0x9, 0x3, 0x3, 0x6, 0x0, 0x8, 0x1, 0x9c0, 0x7, 0x8, 0xd], [0x6, 0x46, 0xfffffff9, 0x8001, 0xfffffff8, 0xa, 0x7f, 0x8, 0x6, 0x923, 0xf, 0x7, 0x1, 0x6, 0xf9c2, 0x80000001, 0x0, 0xeb4ef54, 0x5c77, 0x1, 0xb28, 0x7, 0x7f, 0x0, 0x10, 0x7c, 0x8, 0x401, 0x0, 0x4, 0x5, 0x0, 0x0, 0x2, 0x4, 0x0, 0x6, 0x9, 0x2, 0xc3, 0x4, 0x9, 0x4, 0xa0000, 0xfffffffd, 0x0, 0x5, 0xfffffc01, 0x1, 0x5, 0x101, 0x6, 0x7ff, 0x6, 0x2, 0x1d4, 0xffff0001, 0xf, 0x7ff, 0x3a, 0x21, 0x8000, 0x2, 0xfff], [0xeab, 0x8001, 0x200, 0x3, 0x401, 0x6, 0x9, 0x0, 0x7, 0xff, 0xe3f7, 0x246, 0x7ff, 0x8, 0xfffffffe, 0x7ff, 0x5e59efab, 0x1, 0xddd, 0x2, 0x800, 0x4, 0x10001, 0x4, 0x3, 0x4, 0x6, 0x7, 0x1, 0x5, 0x997, 0x401, 0x0, 0x6, 0xfffff61e, 0xfffffffa, 0x80, 0x7, 0x0, 0x8, 0x1, 0x8, 0x934, 0xcd0, 0x1000, 0x1, 0x0, 0x8, 0x8, 0x6, 0x5, 0x80, 0xff, 0x5, 0x6, 0x29ef, 0x6, 0xc2, 0x6, 0x4, 0x8, 0x339c, 0x7, 0x7]}, 0x45c) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet6_udp-sendmmsg$unix-syz_open_procfs-pread64-recvmmsg-sched_setattr-sendmmsg-socket-socket$inet6_tcp-close-socket$inet6_mptcp-bind$inet6-listen-socket$inet_smc-connect$inet-accept-connect$inet-sendmmsg$inet-mlock-mlock2-io_uring_setup-syz_create_resource$binfmt-write$binfmt_script-close-write$uinput_user_dev-execveat$binfmt-socket$inet-bpf$PROG_LOAD detailed listing: executing program 0: socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') pread64(r0, &(0x7f0000000040)=""/227, 0xe3, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x5, 0x8, 0x1, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0x2}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x800) r1 = socket(0x840000000002, 0x3, 0x100) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) accept(r3, 0x0, 0x0) connect$inet(r1, &(0x7f0000000580)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f00000005c0), 0x4000095, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) io_uring_setup(0x20006d15, &(0x7f00000007c0)={0x0, 0xcc52, 0x200, 0x80001, 0x10c}) r5 = syz_create_resource$binfmt(0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000880)={'#! ', './file1'}, 0xb) close(0xffffffffffffffff) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {0xe, 0xfff, 0x9, 0x1}, 0x15, [0x28, 0x1, 0x81, 0xf0, 0x7b, 0x1, 0x3, 0x6, 0x4, 0x4, 0x3, 0x4, 0x8, 0x311, 0x2c60, 0x0, 0x6, 0x8001, 0xfffff800, 0x800, 0x8001, 0xfffffffa, 0x0, 0x5, 0x1, 0xfe01, 0x5, 0xfd4, 0x0, 0x2, 0x8ffd, 0x1000, 0x9, 0x7, 0x81, 0x8, 0xffffffff, 0x54, 0x9, 0x9, 0x8, 0x649, 0xfffffff7, 0x9, 0xd, 0x9, 0x5, 0xb, 0x2, 0x1, 0x306f, 0x24, 0xffff0001, 0x80000000, 0x6, 0x2, 0x80000001, 0x101, 0x80, 0xc0000000, 0x80, 0x9, 0x1, 0xcdb1], [0x6, 0xc260, 0x1, 0x6, 0x64b, 0x2, 0x9, 0x4, 0x1, 0x4, 0x7, 0x2, 0x93a, 0x4cc, 0x5, 0xd284, 0x7, 0xffff, 0x8, 0x7, 0xfffffff9, 0x3, 0x4, 0x6, 0x8, 0x2b16, 0xffff, 0x4, 0x7ff, 0x464, 0x0, 0x8, 0x6, 0x5, 0x3, 0x6, 0x0, 0xfffffff8, 0x7, 0xe0000000, 0x1c3, 0x80, 0x6, 0x0, 0x1, 0x12b4, 0x7, 0x1, 0x4, 0x3, 0xd, 0xffffffff, 0x49e7, 0x9, 0x3, 0x3, 0x6, 0x0, 0x8, 0x1, 0x9c0, 0x7, 0x8, 0xd], [0x6, 0x46, 0xfffffff9, 0x8001, 0xfffffff8, 0xa, 0x7f, 0x8, 0x6, 0x923, 0xf, 0x7, 0x1, 0x6, 0xf9c2, 0x80000001, 0x0, 0xeb4ef54, 0x5c77, 0x1, 0xb28, 0x7, 0x7f, 0x0, 0x10, 0x7c, 0x8, 0x401, 0x0, 0x4, 0x5, 0x0, 0x0, 0x2, 0x4, 0x0, 0x6, 0x9, 0x2, 0xc3, 0x4, 0x9, 0x4, 0xa0000, 0xfffffffd, 0x0, 0x5, 0xfffffc01, 0x1, 0x5, 0x101, 0x6, 0x7ff, 0x6, 0x2, 0x1d4, 0xffff0001, 0xf, 0x7ff, 0x3a, 0x21, 0x8000, 0x2, 0xfff], [0xeab, 0x8001, 0x200, 0x3, 0x401, 0x6, 0x9, 0x0, 0x7, 0xff, 0xe3f7, 0x246, 0x7ff, 0x8, 0xfffffffe, 0x7ff, 0x5e59efab, 0x1, 0xddd, 0x2, 0x800, 0x4, 0x10001, 0x4, 0x3, 0x4, 0x6, 0x7, 0x1, 0x5, 0x997, 0x401, 0x0, 0x6, 0xfffff61e, 0xfffffffa, 0x80, 0x7, 0x0, 0x8, 0x1, 0x8, 0x934, 0xcd0, 0x1000, 0x1, 0x0, 0x8, 0x8, 0x6, 0x5, 0x80, 0xff, 0x5, 0x6, 0x29ef, 0x6, 0xc2, 0x6, 0x4, 0x8, 0x339c, 0x7, 0x7]}, 0x45c) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$nl_route-sendmsg$nl_route-epoll_create1-socket$nl_netfilter-openat$nvme_fabrics-syz_emit_ethernet-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-prctl$PR_SCHED_CORE-sched_setattr-memfd_create-execveat-add_key$user-pipe2$watch_queue-ioctl$IOC_WATCH_QUEUE_SET_SIZE-keyctl$KEYCTL_WATCH_KEY-read$watch_queue-keyctl$revoke-ioctl$OCFS2_IOC_GROUP_EXTEND-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-ioctl$sock_inet_SIOCADDRT-write$tun-open-fsopen detailed listing: executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010000305000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="95430200000002002c00128009000100626f6e64000000001c000280000012000900000008000500ff010000e9fd03000800001e"], 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x40800) epoll_create1(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) memfd_create(&(0x7f0000000440)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(0xffffffffffffffff, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x5b) read$watch_queue(r1, &(0x7f0000000640)=""/1, 0x1) keyctl$revoke(0x3, r4) ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f0000000680)=0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000700)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000740)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000780)={0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @remote}, 0x4, 0x0, 0x0, 0x0, 0x200a, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r6, &(0x7f0000000800)=ANY=[@ANYBLOB="080000fa"], 0xdc) open(&(0x7f0000000840)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000880)='nfs4\x00', 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$nl_route-sendmsg$nl_route-epoll_create1-socket$nl_netfilter-openat$nvme_fabrics-syz_emit_ethernet-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-prctl$PR_SCHED_CORE-sched_setattr-memfd_create-execveat-add_key$user-pipe2$watch_queue-ioctl$IOC_WATCH_QUEUE_SET_SIZE-keyctl$KEYCTL_WATCH_KEY-read$watch_queue-keyctl$revoke-ioctl$OCFS2_IOC_GROUP_EXTEND-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-ioctl$sock_inet_SIOCADDRT-write$tun-open-fsopen detailed listing: executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010000305000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="95430200000002002c00128009000100626f6e64000000001c000280000012000900000008000500ff010000e9fd03000800001e"], 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x40800) epoll_create1(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) memfd_create(&(0x7f0000000440)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(0xffffffffffffffff, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x5b) read$watch_queue(r1, &(0x7f0000000640)=""/1, 0x1) keyctl$revoke(0x3, r4) ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f0000000680)=0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000700)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000740)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000780)={0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @remote}, 0x4, 0x0, 0x0, 0x0, 0x200a, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r6, &(0x7f0000000800)=ANY=[@ANYBLOB="080000fa"], 0xdc) open(&(0x7f0000000840)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000880)='nfs4\x00', 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 44 programs with base timeout 30s testing program (duration=41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [40, 26, 15, 30, 3, 30, 30, 30, 10, 18, 1, 17, 29, 29, 1, 26, 24, 2, 2, 19, 1, 24, 30, 5, 10, 2, 28, 5, 6, 4, 5, 30, 30, 9, 4, 14, 2, 1, 2, 23, 4, 5, 28, 2] detailed listing: executing program 1: syz_usb_connect(0x2, 0x9a2, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904", @ANYRESOCT, @ANYRESOCT], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x151c00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x20, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x20, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) (async) keyctl$clear(0x3, 0xfffffffffffffffd) add_key(&(0x7f00000001c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="e4010000100001000000000000000000fc000000000000000000000000000000000000000000000000ecdf000000000a00000000000000080000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000c73b0000000000000000000000000000000000800000000000000000000000000000000000000000ffffffff2dbd700000000000020004004c000000000000001c001700000000002abd700000000000000000000000000000000000480002006362632873657270656e742900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008d001400686d61632873686132353629000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000802000080000000aef356316f6f7d6ab0f8637b42ff0300008aa309bdd3f9dcffb669556b74c61e032441fd13571c4c64597441f3cf2a548c89a004673b82b4618529a52c676f7c94000000", @ANYRESDEC=r2], 0x1e4}}, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="e4010000100001000000000000000000fc000000000000000000000000000000000000000000000000ecdf000000000a00000000000000080000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRESDEC=r2], 0x1e4}}, 0x0) socket$rds(0x15, 0x5, 0x0) (async) socket$rds(0x15, 0x5, 0x0) request_key(&(0x7f00000019c0)='ceph\x00', &(0x7f0000001a00)={'syz', 0x3}, &(0x7f0000001a40)='{\x00', 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000600)='keyring\x00', &(0x7f0000001a80)={'syz', 0x0}, 0x0, r5) fsopen(&(0x7f0000000140)='hfsplus\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a300000000098ce9a9ff70a010400000000000800000100000008000a400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000009608000600000000220500020089000000380001800c0001006269747769736500280002800800034000000004080001400000001408000240000000120800048004000100040005800900010073797a3000000000140000001100010000000000000000000000000a"], 0x10c}}, 0x0) syz_open_dev$evdev(&(0x7f00000005c0), 0x4, 0x2) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000440)=""/230, 0xe6}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0xc001}, 0x0) (async) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000440)=""/230, 0xe6}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0xc001}, 0x0) executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 32) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = openat(0xffffffffffffff9c, 0x0, 0x41, 0x48) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r2 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) (async, rerun: 32) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) (async, rerun: 32) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000580)={0x1, 0x1, 0x4a, r10, 0x4}, 0xc) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) r11 = add_key$user(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), 0x390, 0xfffffffffffffffd) (async) r12 = add_key$user(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, &(0x7f0000000780)="01", 0x1, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000e00)='user\x00', &(0x7f0000000e40)=',(+\x00') (async) keyctl$dh_compute(0x17, &(0x7f00000007c0)={0x0, r11, r12}, 0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={'sha256\x00'}}) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000005c0)=0x0) (async, rerun: 64) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000e80)={0x0, 0x8, 0x4, 0x1}) (rerun: 64) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000001280)={{r9}, r13, 0x1, @unused=[0x0, 0x2, 0x48d, 0x5], @devid=r14}) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000880)={r11, 0x8c, 0xd6}, &(0x7f00000008c0)={'enc=', 'pkcs1', ' hash=', {'sha1_mb\x00'}}, &(0x7f0000000940)="f9e4217198c336c83d51f5290ff200b0edc96e2dc80b0b15bf99155f4aa2f8d5bae1be880697a40d25ca503a433d19f91bfd23cf0c9b89391aeb265f3e70ee00c1d3f975df148411cacfaf971c0185aafd821c680effc440c55e3298a13098db006ebf90a00737f4b1b9b08ae57a9843d90125ba1a6fe43227ab063e101ea2bba890820551b062c6a175c33c", &(0x7f0000000d00)=""/214) (async, rerun: 32) r15 = dup(r8) (rerun: 32) syz_ublk_setup_queues(r15, r7, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) executing program 1: r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r0, &(0x7f0000000040)={{0x108, 0x7, 0x5e, 0x192, 0x222, 0x9, 0x2c9, 0x9}, "dfc5dabb95719232efc29d0fd6226c922084036c51caa570eb7752cd37667b3251b2d9965fe6f96c099fa83baf94e459c0788bad78f4f66d58cefefc9717fb1f66fe1ef7c03d3862e48782d71f95845b62ed9662a1774231d430c2ffe18e34179520c1fee50091db4bf37d883f1da46904c17fc949e1dbb5f8716c8d950e51623a7ab597f0ebadcaf308067910589301b9345b07459855689866a52c6a30712d658fac995328a384fbd1b62c17f14222e524e3de8ab74822182f62f67cf0277d57ba4336184d087c4eaceac9e522d566bd8d7b4fca6fbaa0139c4083fc3a874b957f3fc0880245", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa07) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000a80)=0x2, 0x4) r2 = syz_open_dev$video(&(0x7f0000000c00), 0x7, 0x0) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000ac0)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000b00)=0x7, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000b80)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000bc0)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000c00)=ANY=[], 0xfb5) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x229, 0x0) executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000740)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="7800000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000058001a8006000000010000004c0005804800088008000100010000000a000200000000000000000008000300000000000800050000000000080005000000000005000600000000000800070000000000050008"], 0x78}}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000140)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = syz_open_dev$vim2m(&(0x7f0000000400), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000440)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000580)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000005c0)={0x3, 0x1, 0x4, "3a000000000016c713b40c2a3600000000000000000000020100", 0x38414261}) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x41, 0x48) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000700), 0x440, 0x0) write$rfkill(r6, 0x0, 0xfffffeac) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r7 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) r11 = syz_open_dev$sg(&(0x7f0000000080), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r11, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000ff0f00040a000000"]) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={r13}) syz_ublk_setup_queues(r13, 0x0, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x826, 0x0, 0x0}}, 0x0) r14 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f0000000600)={0x80000000}, 0x19a) sendmsg$nl_route(r14, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x70bd2a, 0x25dfdbfc, {0x1c, 0x14, 0x0, 0x3, 0x0, 0x2, 0xc8, 0xb}}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000000000000000000000000000000002000100000000fffffffbfc0000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x400300) executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010000305000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="95430200000002002c00128009000100626f6e64000000001c000280000012000900000008000500ff010000e9fd03000800001e"], 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x40800) epoll_create1(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) memfd_create(&(0x7f0000000440)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(0xffffffffffffffff, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x5b) read$watch_queue(r1, &(0x7f0000000640)=""/1, 0x1) keyctl$revoke(0x3, r4) ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f0000000680)=0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000700)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000740)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000780)={0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @remote}, 0x4, 0x0, 0x0, 0x0, 0x200a, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r6, &(0x7f0000000800)=ANY=[@ANYBLOB="080000fa"], 0xdc) open(&(0x7f0000000840)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000880)='nfs4\x00', 0x0) executing program 32: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010000305000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="95430200000002002c00128009000100626f6e64000000001c000280000012000900000008000500ff010000e9fd03000800001e"], 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x40800) epoll_create1(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) memfd_create(&(0x7f0000000440)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(0xffffffffffffffff, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x5b) read$watch_queue(r1, &(0x7f0000000640)=""/1, 0x1) keyctl$revoke(0x3, r4) ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f0000000680)=0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000700)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000740)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000780)={0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @remote}, 0x4, 0x0, 0x0, 0x0, 0x200a, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r6, &(0x7f0000000800)=ANY=[@ANYBLOB="080000fa"], 0xdc) open(&(0x7f0000000840)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000880)='nfs4\x00', 0x0) executing program 3: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x5e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008100000282b0000000000000000000000ffffac1414bbfe8000000000000000000000000000aa3a020201"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b37, &(0x7f0000000240)={'wlan1\x00', @random="cbcdcb8d00"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a000100b5000000fbdbdf250a800005001b"], 0x24}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002ac0)={0x18, 0x26, 0x101, 0x70bd25, 0x25dfdbfb, {0x1}, [@typed={0x4, 0x167}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x24008080) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}}) socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0}, 0x94) r4 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000300)={0x20, 0x9, 0x2, '$8'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [@NFT_MSG_NEWSETELEM={0xf18, 0xc, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x268, 0x3, 0x0, 0x1, [{0x4}, {0x1fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x138, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x10, 0x1, "259d2a146103017fad365323"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY_END={0xb4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xad, 0x1, "cb0a819f98beada8969d1d307ae7c4e36653454df00343ec6a43c998add6a9fcd697df2fe77a3661b67289cec9902a41b998f892134c0ffae626dba473e7fb39fbf9b860a1ea23aa9453ee45e3c70d4bb16b7884c763395656e0eaf4f765dab9a7f49f45e073689e87543f0fabc6bff0a1d466f17313bf0cb8b4a054bf439388968c05f034ec28b1a61dfd8f668009107abe856fdcdab0f502e8923a858aeb79a883dc8bf05381e286"}]}]}, {0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7ff}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xa68, 0x3, 0x0, 0x1, [{0x4f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x13, 0x6, 0x1, 0x0, "062e050867f37d729aaf2d24e5eba0"}, @NFTA_SET_ELEM_USERDATA={0x8a, 0x6, 0x1, 0x0, "4174be053a851b44c7d2ef7fd8905200caaa02a5103f7aeb8eec7f61278adc564835cc397a239e746adc9418fde1bc80b88c7c6dc7884dbff656f0c490fd606e1ebbb2dd38b418df42ef950264814d7e38ad46b82070274fe3f2bf3d5295f4a0bf33e0d520a2e5e2d231eeca9c9f85eaa6eea35710c026a94427a5808b24bffb7f87806efae4"}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x288, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x84, 0x1, "a23dce67c32b56b0f26ae9fbad2fa87f5566dc3cfeb8176ed80882c0b4a2ad76b3ed1a3a784382dd739cbedcc523b7517b03a9b3e67e47b9fc9d2388ade5f5eabe48725285c0f862ee6797119a5a734435a6adc60157243b1a6f1eebdc26d0d7897464b4b46cacb621241f5ca8db9d6bac6057e45e6794c1ef82269ad8b1bc50"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xda, 0x1, "d52b73044fe4a7513b01f296b53f54d82ff3a2bbb3c03fe6245137d24dc8eedc3a591bd5055ef0ea23271e5e0b5c148413906e4e04f79ec733c300306a2771d853e2e23bdbc0449f583e3bc8cf58b2b4f2163de3e5920a1cca576cfcc4a753947ce0605c6d23fe9cebed60a55582f95249d52334dc98cf50043423f1f810ca0b43c6621c96e1ff2d000957cf0c6f3777158c285a0bcda160381db11faff2662c5abcc9cbae1d38393762acf4c46490aabf3a3ad7d71f3ec4d1fc36a089784c9d992a399c065260005bbfb919ad2614bcefa6287272e7"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x25, 0x1, "8f600da4016a6db5875813e4da44ea97c3668bc150838ff2e8528ea2b88156530c"}, @NFTA_DATA_VALUE={0x7e, 0x1, "4bcf884e9b6aee45f4e726e18798c0307df187991ac0a25668a0e874d33067350744f710a05de37cf98cfcaa2500d5ccf6580d28a7fc9a6fba7f11a614b8c57177eaa5b1f54b31d3d26a62a9d6a565a7fafc1542eee0b1b769e98aba2d2f08158df96e2bb03fd94a6071aa8d4b8e701bf5397a2551fffdbba8a4"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_USERDATA={0x1e, 0x6, 0x1, 0x0, "a5b247a0d61a094224f21b9a7d43d12d4c976f58bcc87a28e794"}, @NFTA_SET_ELEM_KEY_END={0x50, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4c, 0x1, "58aa305b8fc735b45671a05fd70fcfa2fa6093dc03acb81cd8588ff3457b1786b4d035a9645657020eb901477833ac71164bd3298f4188e08a6dfde4ee7d981912c110a020cf0d3f"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xe8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x58, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5}]}}}, {0x38, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}]}, {0x8c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xdaa}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPR={0x48, 0x7, 0x0, 0x1, @dup={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, {0x4e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @counter={{0xc}, @void}}, @NFTA_SET_ELEM_KEY={0x14c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb4, 0x1, "8aa784c683338d6fec63cef96530fe7810a9eab5b30c3a7a72d3fe90de9f503157d5ff7fd9a38b675f76bcb9fd115a42a93059888095f625d9ec2fe71ccfc1dfa706aa9e126e558c9cf14451bc61a7fbc72473c0e801b82b96568dc52feb9ea0caaff126a04bcf0d76d749bbee972d30b6e71570482dc0d2497becfdc6d16457149f8bea1a416e1fbe938c6fde91338e16ee2b6b696bed57901edbbd8dec4e35d01a0bc6645f58b3e5f6f4439f8dbf21"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xbf485e0530a3d730}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x380, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xba}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5c}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x2c8, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2b8, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x2a4, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xda, 0x1, "ef083c78626a0cf9d3e7cd4194ff805bc210047fd60fc56d09db27406abb1d772db994cddd8eeb23e84b6fcf39b01f81801ddc7617b466523968f43aa88e16d38ac16357cbe9ecc215d4e73238e129b6de728e8dbe5ff60241268865ddf58028208fb21b72aff208b2fa93a56e678024cca6837c3b57079a9c32d2907b9a02a14216925bbcd4056ce83b174e26fcbe46e00874cc6cb2a76ee28ba2c5317c8d2e551bb152ac635d45040d1ed8b9e8a58337e10f684f094507201137034f735645dfa8faf16d9bab4a3fc2160e72668c6985f4697f971b"}, @NFTA_DATA_VALUE={0xeb, 0x1, "e46729abd322ded375c99467ed6a168bb77d4577100cb7444bd4c384eb736a59276b8228a2fe59b655bf2bc82f5f3dd09c37cc49ea8e942692a4d92cb866743c2026330e71b03c6fe842fd1cfd28b7e5ce570a534747c45b313de79f09df40b36fc76f409cc19a0d4f8452748c9f54fbe324dfdb9e1c8fd05b52fd71afb96093b0eab3f23e7175c90e5d5a958dc4b1355685fe4134562f459a875a8f840987eb3e6559756631603e2f78c8cf8341b2682fe3d92db122d59b29c6bb5726d375bfe8aa8c05d2c33b674ddb1a69951119c9d825096f178ab586f18360d374f0132775f3740e93fe8d"}, @NFTA_DATA_VALUE={0x36, 0x1, "7500e503099b7bd642b1a37dc1931e8367a3983808bced588bdde89896112598ed602c7799ac9b72701b35f5405bcf863545"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x31, 0x1, "79456a36c55f75ba64d5facfe4db94f23b684bd0597dfbf4933146760242f14cd9d3ca6371b4051bf074fc2bfa"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x3c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x210, 0x3, 0x0, 0x1, [{0x20c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x208, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x7f, 0x1, "05525858b3cee08c877cbd4f66c6d21eac74d2aa3e21122c9ef72b013f808a905585de9823eca50d9a96023012f1311fe55e7802279615940437cdba1b1bc640b7273fb2d98fd6f0c78b289ad372fac74373bf255449bb25b3221ca848880b9f849a2d50f6fc450a57a18c735f7fd721557f7ee6d6f38286398a8c"}, @NFTA_DATA_VALUE={0xa4, 0x1, "dced2a605720d96c1f4253cd7cbd9a83802d0f40ae9073101b56f3d5e7e76a7f721455aa41f7966f46d56c365f5a325d006705c63533da544fd05a9e7521fc21603034a525b4aa9a05cb048bb8b275df8d6ca9b34bf926fb4ff0cc82f1bc941f93c06e21238e34242b6f1a3c1edb2746c355677a198e3548cc675f9d30f816e9268b59e3406ef1283771d5ae0c8f83ed756d8e4df429af13bdc11d306f2423a5"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xad92}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x94, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffffffffffff}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x71c278cb2e30f2f7}]}}}]}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x8}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1f79b6cc}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x365b3fe6}]}]}, @NFT_MSG_DELTABLE={0x3f8, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0xad, 0x6, "5d8bb9ca947e7fda2c95684af57428b920b428f813d79c59603d21a717919ff73cea24fba8cde0666e6975bc3128b31fa7baeb8121c675d97e854db0224a1b4e18ab2aeba52141984e7a48f0112a1e677c86d8e3c650ab45d3e4f5a30d0bb3c926f3de5c838eab4213db3743bbe455c7b7a0e20d3c8e9e6e25710b115d1c3e62cda3fdcfe3f6546df308b3e3d3bf9af1893f032a5a1707f35eaab36140f47c107637032dc8c82f9650"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xe8, 0x6, "e0a2ec66c360e5f680ded268309b5deddb2df6bac585dd4cef081a1ab1a132572be2a49b51117b8f3b6041ad151438f4f71bb959369cb147a3a00c9154db518bb86a14d601db9b3a9c435aed1c6386ef2704df4b89e9d3f9d68d4d679c5ef9e560b3969a34293e04b617ddffafdf38d07ea30522a966e50dffb7089ae2312d5ac30e9c5c523b9982592cbc79bfefe0c4ba1f93525ca14812fb38796aca3a168abbcae3cec93f65d52bd0e08ec706d98a22a3176948fbe701a2e5320f2d175aeb184d1f66ffedc88288c51b5738e4d7c10d17737b6b95baebeb50d5b47ac53eb6bb77e7b8"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xec, 0x6, "924da0afd36a352087214af53c3cf468729b7130a3271050ec1cda0b9d79a0ba688e6c201a15e3c5aa4c982e6b45f8b951cc4d95f01aec02dada3bac8ae722cd8d19b2627febee1eb6b0341c8f0efeeede658c6b8db07e4d4cac909574c66847fa5f3b26aa39c59b5a0220c17a600a5e997160443a29a8c2bf0e3584cbf036f485254c66aea67002bcf78883f50d67cfbce801cf70e785a72b70aed94d6b3d14c67f088d415408707b4823a7438ff0dd156cdc917b12a6ff33850bffe3840482f13878acc82941cbe8adf01bc29a53546df78fcf834ca178a3d48c14cb6cc620ea6ee949fe9e99dc"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x89, 0x6, "167d1057cbdc2f4a04f3954a80d8ffcf114c815cfe79f649ff4744b8387263748708eb788e2058c85ccf37bd7c26649de37997b63c1b30299b5d5ad0bae27a92153be408449b27fe6367878183574f2703fb622fbf8d3381db89c92df0e019f8136a61f948dd4eb834258f3ce560685e54db4af5173a17296642476f1561aca85bbb853bb0"}, @NFTA_TABLE_USERDATA={0x99, 0x6, "038ba1db023b61f8b72918ee236c19af001c4ce72f706bf66a7028878e19d9b00f436adfe2af04f918e5bf957eb82ec1f5ee908ac7d82103b92c9421e444ba397bf647d71d2ed2a5fd979ab028be02b96dc71605775e89bd4b4f18a07bc22d6fa87c978697b35e454d711bc4a9a9a3a4fc620d4fc7df5d4ac9986ecc48f4b0f0ea91b6616a43956b43e32a4eb004e05dcc089d1b26"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1494}, 0x1, 0x0, 0x0, 0x8084}, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r3, 0xc0285840, &(0x7f0000000340)={0x4, 0x5, 0x3, 0x0, 0x400, 0x4, 0x0, &(0x7f0000000200)=[{0xc, 0x101}, {0x1c, 0xfe}, {0xd, 0x1ff, 0x6}, {0x1, 0xfe, 0x80}]}) close(r6) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, 0x0, 0x4890) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14) pidfd_getfd(0xffffffffffffffff, r1, 0x0) executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xb43, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x40, "", [{{0x9, 0x4, 0x0, 0x10, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20003b0000003b0b83efb9302677108120a6ad2a61a54607b71ea9e43d359c479c37f525090000000000000085e8"], 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000) read(r0, &(0x7f0000000500)=""/209, 0xd1) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd70010571fcfb0300120018000180110001006574683a6d6163766c616e3100000000"], 0x2c}, 0x1, 0x300}, 0x8000) mlock(&(0x7f0000653000/0x3000)=nil, 0x3000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000640)='10000', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r4, &(0x7f0000000740)='0', 0x1) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000780)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000f6ffffff8746c13e", @ANYRES32=0x1, @ANYBLOB="0000000000410000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4ffffff0000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0005007e0500000603000003000000fcffffff05010905a10105091901290a150025017501950a8102950175068103c00f2d8eb84f1fa8c3557d8360159e92c0fb3593ed3a964ae4cf679b4ba1a7e3ea60f264d85f"], 0x135) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x9801) move_mount(r1, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0xb) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x3, 0x0, 0x7, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0x56d, 0xe5c7, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x6, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x49, 0xff}}}}}]}}]}}, 0x0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xe5) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000400)={'\x00', 0x6, 0x8, 0x4b8, 0x10001, 0xa6, r4}) write$UHID_INPUT2(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\f\x00\x00\x00g\x000'], 0xc) syz_emit_ethernet(0xb9, &(0x7f0000000080)={@random="e2f4aeef9214", @remote, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@generic={0x3, "5a39d57f8fc894741fde1c7ff691aa91edeff73f2b72370784b06e0abe2a7e72d56babe92787b92eb656a7fe272086345f811e59981359f3197d58be4745d2d10a3efc466d8e7043fafccfff3981fc5a9b703612f6236417aa5a0da9b231389f2c91a11d03c72810466b3100345f15b73471bcaa47526ace0c9460a9c7d7159e086910eb4d4c018122eea3e38a69f8dad2a92418da8d9c265555c5dd311b169de4f8b3ab49d567"}}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x11049100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r5, 0x0, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048010}, 0x40088d5) executing program 3: socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') pread64(r0, &(0x7f0000000040)=""/227, 0xe3, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x5, 0x8, 0x1, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0x2}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x800) r1 = socket(0x840000000002, 0x3, 0x100) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) accept(r3, 0x0, 0x0) connect$inet(r1, &(0x7f0000000580)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f00000005c0), 0x4000095, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) io_uring_setup(0x20006d15, &(0x7f00000007c0)={0x0, 0xcc52, 0x200, 0x80001, 0x10c}) r5 = syz_create_resource$binfmt(0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000880)={'#! ', './file1'}, 0xb) close(0xffffffffffffffff) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {0xe, 0xfff, 0x9, 0x1}, 0x15, [0x28, 0x1, 0x81, 0xf0, 0x7b, 0x1, 0x3, 0x6, 0x4, 0x4, 0x3, 0x4, 0x8, 0x311, 0x2c60, 0x0, 0x6, 0x8001, 0xfffff800, 0x800, 0x8001, 0xfffffffa, 0x0, 0x5, 0x1, 0xfe01, 0x5, 0xfd4, 0x0, 0x2, 0x8ffd, 0x1000, 0x9, 0x7, 0x81, 0x8, 0xffffffff, 0x54, 0x9, 0x9, 0x8, 0x649, 0xfffffff7, 0x9, 0xd, 0x9, 0x5, 0xb, 0x2, 0x1, 0x306f, 0x24, 0xffff0001, 0x80000000, 0x6, 0x2, 0x80000001, 0x101, 0x80, 0xc0000000, 0x80, 0x9, 0x1, 0xcdb1], [0x6, 0xc260, 0x1, 0x6, 0x64b, 0x2, 0x9, 0x4, 0x1, 0x4, 0x7, 0x2, 0x93a, 0x4cc, 0x5, 0xd284, 0x7, 0xffff, 0x8, 0x7, 0xfffffff9, 0x3, 0x4, 0x6, 0x8, 0x2b16, 0xffff, 0x4, 0x7ff, 0x464, 0x0, 0x8, 0x6, 0x5, 0x3, 0x6, 0x0, 0xfffffff8, 0x7, 0xe0000000, 0x1c3, 0x80, 0x6, 0x0, 0x1, 0x12b4, 0x7, 0x1, 0x4, 0x3, 0xd, 0xffffffff, 0x49e7, 0x9, 0x3, 0x3, 0x6, 0x0, 0x8, 0x1, 0x9c0, 0x7, 0x8, 0xd], [0x6, 0x46, 0xfffffff9, 0x8001, 0xfffffff8, 0xa, 0x7f, 0x8, 0x6, 0x923, 0xf, 0x7, 0x1, 0x6, 0xf9c2, 0x80000001, 0x0, 0xeb4ef54, 0x5c77, 0x1, 0xb28, 0x7, 0x7f, 0x0, 0x10, 0x7c, 0x8, 0x401, 0x0, 0x4, 0x5, 0x0, 0x0, 0x2, 0x4, 0x0, 0x6, 0x9, 0x2, 0xc3, 0x4, 0x9, 0x4, 0xa0000, 0xfffffffd, 0x0, 0x5, 0xfffffc01, 0x1, 0x5, 0x101, 0x6, 0x7ff, 0x6, 0x2, 0x1d4, 0xffff0001, 0xf, 0x7ff, 0x3a, 0x21, 0x8000, 0x2, 0xfff], [0xeab, 0x8001, 0x200, 0x3, 0x401, 0x6, 0x9, 0x0, 0x7, 0xff, 0xe3f7, 0x246, 0x7ff, 0x8, 0xfffffffe, 0x7ff, 0x5e59efab, 0x1, 0xddd, 0x2, 0x800, 0x4, 0x10001, 0x4, 0x3, 0x4, 0x6, 0x7, 0x1, 0x5, 0x997, 0x401, 0x0, 0x6, 0xfffff61e, 0xfffffffa, 0x80, 0x7, 0x0, 0x8, 0x1, 0x8, 0x934, 0xcd0, 0x1000, 0x1, 0x0, 0x8, 0x8, 0x6, 0x5, 0x80, 0xff, 0x5, 0x6, 0x29ef, 0x6, 0xc2, 0x6, 0x4, 0x8, 0x339c, 0x7, 0x7]}, 0x45c) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) executing program 33: socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') pread64(r0, &(0x7f0000000040)=""/227, 0xe3, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x5, 0x8, 0x1, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0x2}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x800) r1 = socket(0x840000000002, 0x3, 0x100) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) accept(r3, 0x0, 0x0) connect$inet(r1, &(0x7f0000000580)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f00000005c0), 0x4000095, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) io_uring_setup(0x20006d15, &(0x7f00000007c0)={0x0, 0xcc52, 0x200, 0x80001, 0x10c}) r5 = syz_create_resource$binfmt(0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000880)={'#! ', './file1'}, 0xb) close(0xffffffffffffffff) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {0xe, 0xfff, 0x9, 0x1}, 0x15, [0x28, 0x1, 0x81, 0xf0, 0x7b, 0x1, 0x3, 0x6, 0x4, 0x4, 0x3, 0x4, 0x8, 0x311, 0x2c60, 0x0, 0x6, 0x8001, 0xfffff800, 0x800, 0x8001, 0xfffffffa, 0x0, 0x5, 0x1, 0xfe01, 0x5, 0xfd4, 0x0, 0x2, 0x8ffd, 0x1000, 0x9, 0x7, 0x81, 0x8, 0xffffffff, 0x54, 0x9, 0x9, 0x8, 0x649, 0xfffffff7, 0x9, 0xd, 0x9, 0x5, 0xb, 0x2, 0x1, 0x306f, 0x24, 0xffff0001, 0x80000000, 0x6, 0x2, 0x80000001, 0x101, 0x80, 0xc0000000, 0x80, 0x9, 0x1, 0xcdb1], [0x6, 0xc260, 0x1, 0x6, 0x64b, 0x2, 0x9, 0x4, 0x1, 0x4, 0x7, 0x2, 0x93a, 0x4cc, 0x5, 0xd284, 0x7, 0xffff, 0x8, 0x7, 0xfffffff9, 0x3, 0x4, 0x6, 0x8, 0x2b16, 0xffff, 0x4, 0x7ff, 0x464, 0x0, 0x8, 0x6, 0x5, 0x3, 0x6, 0x0, 0xfffffff8, 0x7, 0xe0000000, 0x1c3, 0x80, 0x6, 0x0, 0x1, 0x12b4, 0x7, 0x1, 0x4, 0x3, 0xd, 0xffffffff, 0x49e7, 0x9, 0x3, 0x3, 0x6, 0x0, 0x8, 0x1, 0x9c0, 0x7, 0x8, 0xd], [0x6, 0x46, 0xfffffff9, 0x8001, 0xfffffff8, 0xa, 0x7f, 0x8, 0x6, 0x923, 0xf, 0x7, 0x1, 0x6, 0xf9c2, 0x80000001, 0x0, 0xeb4ef54, 0x5c77, 0x1, 0xb28, 0x7, 0x7f, 0x0, 0x10, 0x7c, 0x8, 0x401, 0x0, 0x4, 0x5, 0x0, 0x0, 0x2, 0x4, 0x0, 0x6, 0x9, 0x2, 0xc3, 0x4, 0x9, 0x4, 0xa0000, 0xfffffffd, 0x0, 0x5, 0xfffffc01, 0x1, 0x5, 0x101, 0x6, 0x7ff, 0x6, 0x2, 0x1d4, 0xffff0001, 0xf, 0x7ff, 0x3a, 0x21, 0x8000, 0x2, 0xfff], [0xeab, 0x8001, 0x200, 0x3, 0x401, 0x6, 0x9, 0x0, 0x7, 0xff, 0xe3f7, 0x246, 0x7ff, 0x8, 0xfffffffe, 0x7ff, 0x5e59efab, 0x1, 0xddd, 0x2, 0x800, 0x4, 0x10001, 0x4, 0x3, 0x4, 0x6, 0x7, 0x1, 0x5, 0x997, 0x401, 0x0, 0x6, 0xfffff61e, 0xfffffffa, 0x80, 0x7, 0x0, 0x8, 0x1, 0x8, 0x934, 0xcd0, 0x1000, 0x1, 0x0, 0x8, 0x8, 0x6, 0x5, 0x80, 0xff, 0x5, 0x6, 0x29ef, 0x6, 0xc2, 0x6, 0x4, 0x8, 0x339c, 0x7, 0x7]}, 0x45c) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000f6ffffff8746c13e", @ANYRES32=0x1, @ANYBLOB="0000000000000018b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) executing program 0: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) unshare(0x22020600) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, &(0x7f00000025c0)=""/102398, &(0x7f000001b5c0)=0x18ffe) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0xffbffff7, 0xffffffff, 0x1}, 0x10) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000fd3f0000000000000900000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f0000000400), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000440)={0x20000014}) epoll_wait(r4, &(0x7f0000000480)=[{}], 0x1, 0x400) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/4100, 0x1004) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x4000040) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000ac0)={0x8cb, "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"}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000240)=0x1002, 0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000002000000d00000000000f00183400000a180500000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000440)={0x0, 0xf, 0x1, "ed"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000001080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x8, 0x24200) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, &(0x7f00000002c0)={0x20, 0x22, 0xeb, {0xeb, 0x21, "5669c367224f441d849f1dc874d6981fdf93c15d2c92ff32d5cc10f4adc572432a2d87ff04cd40d57621525e8808ff4f47dbb374b19616cd22b818503783d70c0071e0083309d691c82459445b4ae80b0da4c02db4abd9286c524ddbca6d6902f01a44fc02971bf57631066ba294f2ad304afc6dcfe7a3395235ee52a3c0cc447f29cad6e5a06e94719807cf01db62e0157bd977d8eeef95e90c88be3c9a09df823b40245d4e6de5c154d31a6482c244bfc244ab8237efebb27ea38d697ba9c9a671622286d7a1acf3abd4b25aa989f8e5bb8308ea55ad48a68637d7a10773f11c45668ebbfd6972ad"}}, &(0x7f0000000480)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "66fb9b8b4c0742e9f2ccf197843e5b0e385a48bc30bc65f886595bf3aaba89f860ffe0745abb36f20358517ecde72926e5aa1f38bef760a2612a0378360eaff5e797b44ed498a79d088dce469569bb006830f5bb8b11c1907f3ec1afc0e678cf4b39d8efac4c45e0579d49ff14935807bc9ceb43cd0e352ef681cd1a7b45c9e0fcb7f813b730e622688c1fcf1c7da0403a52cd4aed74b53b2abf76f17847224be73a69cbf2e89c78462133be6a9909b9d88a7dafbe96b3aa8cb5117624fef455bcce97f9d22446a214a63e044bbd0af4964e60bc6782"}}}, &(0x7f0000000740)={0x2c, &(0x7f00000005c0)={0x0, 0x30, 0x26, "bb36fefcf5796d5c2c0b06284bfc87f7cde617e7e236fc6b3d6166c8ee7c1237690c9ce40a8d"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000006c0)={0xc0, 0x5, 0x6, "2ea444361736"}, &(0x7f0000000700)={0x40, 0x5, 0x5, "5e75c73377"}}) syz_usb_control_io$printer(r0, 0x0, 0x0) executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000ff8000000000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000030000000000000400000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) executing program 2: symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00') (async) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0xe00008da) (async, rerun: 32) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./bus\x00') (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x40) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480), 0x140, 0x0) r3 = dup(r2) read(r3, &(0x7f00000004c0)=""/189, 0xbd) fadvise64(r3, 0x3, 0x4000000005, 0x4) (async, rerun: 32) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)=0x20000) (async, rerun: 32) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000280)={0x101, 0x3, 0xfd}) (async) ioctl$MEMREAD(r1, 0xc0404d1a, &(0x7f0000000440)={0x8, 0x63, 0xd7, &(0x7f00000002c0)=""/99, &(0x7f0000000340)=""/215, 0x1, '\x00', {0xc3, 0x886, 0x55}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x42) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x3) executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000fffffff07f000000000000005504000001ed0a002500000017ff2000dd40000000000000730a13fe000000003e04000000000000e5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800d9b3a69b37caa964e4b7000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325a904514d8e90131bfc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f49e4dcc1b7af0b51b9cafeda067b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb860600911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b30e55ac1275e938706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff0492df6b53002514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa250bc93b233a2291b5b10eebc49b6882f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753446de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000010000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468db"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) executing program 2: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) unshare(0x22020600) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, &(0x7f00000025c0)=""/102398, &(0x7f000001b5c0)=0x18ffe) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0xffbffff7, 0xffffffff, 0x1}, 0x10) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000fd3f0000000000000900000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000003c0), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000400), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000440)={0x20000014}) epoll_wait(r2, &(0x7f0000000480)=[{}], 0x1, 0x400) ppoll(&(0x7f00000004c0)=[{r2, 0x401}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$kcm(0x10, 0x2, 0x4) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/4100, 0x1004) executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) keyctl$dh_compute(0x17, &(0x7f0000000980), 0x0, 0x0, &(0x7f00000009c0)={0x0}) r3 = syz_open_dev$sndctrl(&(0x7f0000000a00), 0x84, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0485510, &(0x7f0000000a40)={0x0, 0x1, 0x1, 0x0, &(0x7f0000000ac0)=[{}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000b40)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0x1, 0x0, 0x2, 0x4, 0x0, 0x7, 0x8004, 0xa, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000b80)='X', 0x34000, 0x0, &(0x7f0000000bc0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000c00)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000cc0)={{0x0, 0xeeee0000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x5, 0x9, 0x10}, {0xffff1000, 0x200000, 0xd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x7}, {0x2000, 0x5000, 0xc, 0xff, 0x4, 0x4, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6, 0xfc}, {0x6000, 0xfffef001, 0x9, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x83}, {0xdddd0000, 0xb000, 0x0, 0x35, 0x3, 0x0, 0x42, 0x0, 0x0, 0x0, 0x3}, {0xeeef0000, 0xe6e31000, 0x8, 0xfe, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x30000, 0x2000, 0xf, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26, 0x0, 0x0, 0x1}, {0x80a0000, 0x807}, {0x7000}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0xfffffffffffffffc, 0x0, 0x0, [0x0, 0xe4, 0x1, 0x40]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000740), 0x8, 0x10, &(0x7f0000000780), 0x3f}, 0x16) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r5) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000e40)={'syzkaller0\x00', 0x1}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=@newtfilter={0x74, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1, 0xf}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xf, 0x800, 0x5, 0xf738, {0xb, 0x2, 0x0, 0x2, 0x200, 0x1}, {0x2, 0x1, 0x1, 0x0, 0xffff}, 0xd8, 0xeb}}]}]}}]}, 0x74}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000840)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x8004) executing program 4: unshare(0x6020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000002c0)={0x3, 0x0, 0xfffff3a2}) executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80001001300100000000000fbdbdf25fc000000000000000000000000000000fc000000000000000000000000000001000000044e2400000a0060203b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0xfffffffffffffdee, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x40000001}, 0x24004000) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000ffffff8000000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc01000000000000000080ff00000000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) (async) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001740)={{r0}, r1, 0x18, @inherit={0x98, &(0x7f00000003c0)={0x1, 0xa, 0xef, 0x3, {0x0, 0x7, 0x1, 0x8000000000000000, 0x6}, [0x48c9, 0x4, 0xc010, 0xfffffffffffffffc, 0x1000, 0x5c8d, 0x9, 0x8001, 0x1, 0xff]}}, @subvolid=0x2}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001740)={{r0}, r1, 0x18, @inherit={0x98, &(0x7f00000003c0)={0x1, 0xa, 0xef, 0x3, {0x0, 0x7, 0x1, 0x8000000000000000, 0x6}, [0x48c9, 0x4, 0xc010, 0xfffffffffffffffc, 0x1000, 0x5c8d, 0x9, 0x8001, 0x1, 0xff]}}, @subvolid=0x2}) poll(0x0, 0x0, 0x2) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) (async) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044402, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000001c0)={0x0, 0x0, 0x10001, 0x5}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000000700)={0xc, {"a2e3ad2107c752f91b25470987f70e06d038e7ff7fc6e5539b3264078b089b3b083468060890e0878f0e1ac6e70a9b3365959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31350d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7dafbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85800056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dab54c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10746fc4090ac97b77e4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f5f71d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc07d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810930500ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab974c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc660db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d154d8a5ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21e5ec68cb068ea88067d905ea917bb03eefdaebdeabf2c0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x104a) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0002003c0001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010400028005000100010000003c000380"], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000003f0026012bbd700000000000117c00000400fc800c00018055fd0400", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000140007000001000000000000000000000000000100009d00", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) executing program 0: syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8a16, 0x3a10, 0x3, 0x31d}, &(0x7f0000000500), &(0x7f0000000580), &(0x7f0000000180)) syz_clone(0x100111, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) r0 = eventfd(0x0) io_submit(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xc2, r0, &(0x7f0000000140)="0100fd6400000000", 0x8, 0x36, 0x0, 0x0, r0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001701000001e500000000d8936e75a545998a2db3c561ef65a300000000000018000000000000001701000004000000fffbffff00000000"], 0x30, 0x40}], 0x1, 0x40800) executing program 6: unshare(0x6020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000002c0)={0x3, 0x0, 0xfffff3a2}) executing program 6: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) read(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r9, 0x80000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000cc0)) lseek(r0, 0x0, 0x3) r10 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) r11 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x10, 0x81, 0x80, 0x4}, {0x9, 0x5, 0xe, 0x2, 0x10, 0xd, 0xa, 0x9}, {0x9, 0x5, 0x9, 0x3, 0x20, 0x0, 0x0, 0xfd}}}}}}]}}, 0x0) syz_usb_ep_write(r11, 0x7, 0x9, &(0x7f0000000300)="39151cdff086a4bbcb") executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r2, @ANYBLOB="5c005a80140001800500070001000000050006000100000044000380120001000c"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000000c0)="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") r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0x3}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffe0f, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r8 = socket$inet6(0xa, 0x2, 0x0) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f0000008880), 0x45b, 0x2, 0x0) unshare(0x62020400) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r9, 0x0, 0x5, &(0x7f0000000240)={@loopback, @multicast2, 0xfffb, "66c5aff8a7eb17f1f6cec2e7780795478c84aea31700", 0x96bf, 0x2, 0x7a, 0x6b}, 0x3c) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000000), 0x4) socket(0x10, 0x3, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4001010) executing program 2: madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r0, &(0x7f0000000740)='0', 0x1) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\t/'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000780)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000020a09040000000000000000020000000900010073797a3000000000090001e173797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0x74}, 0x1, 0xf5ffffff}, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x80000000000000a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) epoll_create(0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309180008000a00", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800070008000000062102000100000008000500", @ANYRES16=r0], 0x54}, 0x1, 0x0, 0x5000000, 0x24004845}, 0x8000002) executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000ffffff800000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000fffffffd7f000000000000005504000001ed0a002500000017ff2000dd40000000000000730a13fe000000003e04000000000000e5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800d9b3a69b37caa964e4b7000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325a904514d8e90131bfc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f49e4dcc1b7af0b51b9cafeda067b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb860600911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b30e55ac1275e938706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff0492df6b53002514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa250bc93b233a2291b5b10eebc49b6882f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753446de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000010000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468db"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) executing program 5: r0 = syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000500)=ANY=[@ANYBLOB="120110030000004035120182400001020301090286080000003009080b00010107208c0904000000010120000924010040041d000708240a0001ff23030c240302"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="004e82a3adfc8c4409e6f5030400000004034308"], 0x0, 0x0, 0x0}, 0x0) executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'team0\x00', 0x1}, 0x18) close(0x3) r1 = syz_open_dev$sndpcmc(&(0x7f0000000540), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f00000009c0)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000c40)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1c79, &(0x7f0000000d00)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000e40)=0x7) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000070e624618780e663a6ad3f996f37381f72000034ffac913a50583a1a32002695b61efd1b936f36509da3d0b16308fda277e185fc2621ada4e2c7c0ea3590074f764e2edfcc0a89053afde9c9569cef6d0c8a2d21f7a00aad04c51daffce9b81ec0c6d0e7320a99f8588c9a043d73eb0e8e256afa2eada13f068a74c6080b6367b250260100010014fcd19c931e8ff5c21521b1d2dd6c099f45599ce9ef3e9a97d32bfc197e1a82ed773c79c0e7222a0aaed827b1a458b4a6f1b00db798b630b30a0d68a7ab22d2c2fdff79b571a3d3c40274032d59e7ff76bb54b70232c7c80f162556e9d05fdc3d12b6a453e0ea802972966ab2c7d59d7b6e4c127a5ccd88211b30b90f31dd", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000020000008520000004000000184a00000200000000000000000000007c94000010000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r6, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x80}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2f}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x4}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x4880) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000180)) executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001701000001e500000000d8936e75a545998a2db3c561ef65a300000000000018000000000000001701000004000000fffbffff00000000"], 0x30, 0x40}], 0x1, 0x40800) executing program 6: unshare(0x6020400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000200)={0x4004, r0, 0x2}) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, 0x0) executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x12, 0x0, {0xc, 0xd}, {0xc, 0x5}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048810}, 0x2000000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f00000005c0)={0xdf, 0x0, 0x80000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x4, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001b80)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0x270, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) mprotect(&(0x7f0000e15000/0x2000)=nil, 0x2000, 0x2) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000001f80)={'ip6_vti0\x00', &(0x7f0000001fc0)=@ethtool_cmd={0x41, 0x5, 0x3, 0x0, 0x7, 0x0, 0x0, 0xfc, 0x0, 0xfc, 0x0, 0xfffffff9, 0x0, 0xff, 0x0, 0x45, [0x0, 0x6]}}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f0000019100400014000200100011"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000100)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000240)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x1, 0x5f6, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x24}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_open_dev$media(&(0x7f00000003c0), 0x6be, 0xc8683) ioctl$MEDIA_IOC_REQUEST_ALLOC(r10, 0x80047c05, &(0x7f0000000480)) r11 = dup(r9) syz_ublk_setup_queues(r11, r8, &(0x7f0000000340)={0x0, 0x20fb87, 0x1, 0xfffffffd, 0x32c}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xba5e, 0x8000, 0x1006, 0x160, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6605, 0x200, 0x10000000, 0x546}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88db, 0x10000, 0x3, 0xfffffffc, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000000, 0x8000, 0x2, 0xbd, 0x0, r3}}], 0x1, &(0x7f0000000540)={0x2e, 0x54, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r7, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) ioctl$MEMREADOOB(r11, 0xc0104d04, &(0x7f0000000500)={0x6, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_modify_offsets$flags(r4, r12, 0x38, 0xfffffffa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x14) syz_usb_connect(0x3, 0x96d, &(0x7f0000000a80)=ANY=[@ANYBLOB="12010102e21b5140b1134200e8a90102030109025b09040d9720090904320409f073ea09090503002000f80040090504104000"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r11, 0x7b2, &(0x7f0000001b40)={&(0x7f0000000b40)=[0x5, 0xaa4, 0xdb, 0x7, 0xd, 0x800, 0x401, 0xf, 0x4, 0x6, 0x800, 0x40, 0x6, 0x4, 0xfffffffe, 0x40d, 0xff, 0x1, 0xc6, 0x100, 0x6, 0x3, 0x80000001, 0xbfb, 0x2, 0x6, 0x8, 0x6, 0x5, 0x64fe2241, 0x6, 0x5, 0x8, 0x8, 0x8b, 0x2, 0x69, 0x3, 0x6, 0xadb433a, 0x10000, 0xffff96d0, 0x0, 0x0, 0x0, 0x2, 0x1000, 0x401, 0x5, 0x0, 0x8001, 0x400, 0x2, 0x5, 0x80, 0x400, 0x5, 0x9, 0x80000001, 0x10001, 0x9, 0x4, 0x8000, 0x7, 0x1, 0x7, 0xffff8000, 0xfffffff7, 0x5, 0x6, 0x0, 0x1, 0xfffffffc, 0x7, 0x7ff, 0x8000, 0x4, 0x2, 0x6, 0x0, 0x2, 0x2, 0x86b, 0x3, 0x5, 0x65c8049d, 0x8, 0x8, 0x6, 0x2, 0xe1, 0x9, 0x6, 0x4, 0x0, 0x3, 0x5, 0x101, 0x9, 0x3, 0x0, 0x0, 0x2, 0x3, 0x3, 0x80000001, 0x5664, 0x80, 0x75, 0x3, 0x8, 0xee, 0x8000, 0x1, 0x10000, 0x7f, 0xa4c, 0x5, 0x80, 0xb, 0x8, 0xb, 0xd, 0xfffffffe, 0x9, 0x1432, 0x0, 0x0, 0x6, 0x1, 0xdb71, 0xffff, 0x4, 0x101, 0x3, 0xc3b9, 0x1, 0x2, 0xb1e4, 0x9, 0x3, 0xe, 0x80000001, 0x8, 0x401, 0x1, 0x7, 0x2, 0x385, 0xde, 0xab84, 0xde, 0x8001, 0x7, 0x7, 0x8000, 0x9, 0x2, 0x2, 0x9, 0x2, 0x5, 0x9, 0x0, 0x6, 0x2, 0x5, 0x81, 0x1000, 0x7, 0x4, 0x40, 0x2, 0x8, 0x10000, 0x9, 0xfffffffe, 0x2, 0xfffffffb, 0x5, 0x1, 0x1, 0x10, 0x2549, 0x5, 0x200, 0x0, 0xeb2, 0x3, 0x2, 0x2, 0xc, 0x6, 0x3ff, 0xffffe3dc, 0x2, 0x9, 0x8, 0xffffdd5e, 0x80, 0xfff, 0x2, 0x1, 0x0, 0x200, 0xe48d, 0xfffff8ee, 0xb1, 0x81, 0xeb, 0x3, 0x0, 0x1, 0x80000001, 0x5, 0x1ff, 0x7, 0x7, 0x5, 0x2, 0x6a38bf39, 0x6, 0x7ff, 0x1bb800, 0x7, 0x5, 0x4, 0x3ff, 0x81, 0x8000, 0x7f, 0x66, 0xffffffff, 0x80, 0x9, 0x0, 0x226a, 0x8, 0x4, 0x790, 0x0, 0xffff8001, 0x8f, 0xbbf, 0x5, 0xffff, 0x9, 0xb83, 0x5, 0x0, 0x6, 0x4, 0x3b, 0x2, 0x8001, 0x8, 0xb9e, 0x6, 0x3, 0x0, 0x9, 0x6, 0x3, 0xfffffff9, 0x7ff, 0x100, 0x0, 0x81, 0x3ff, 0x8, 0x400, 0x9, 0x4, 0x7, 0x8, 0x6, 0x11, 0x1, 0xfffffffd, 0x5, 0xe7cb, 0x3, 0x5, 0xc, 0xff, 0x400, 0x4, 0xb30, 0xe4, 0x7fffffff, 0x9, 0x7, 0xa, 0x1afa, 0x2, 0x6, 0x2, 0x6, 0x1, 0x5, 0x9, 0x2, 0x8001, 0xe, 0x1, 0xfffffffe, 0x2, 0x0, 0x7, 0x66, 0xfffffffa, 0x5, 0x6, 0xe, 0x4, 0x2, 0xe38, 0x3, 0x80, 0xdb23, 0x1, 0x6456, 0x6000000, 0x8, 0xffff, 0x9, 0x0, 0x8d, 0x56, 0xb, 0x2, 0x4, 0x7ff, 0x8, 0x0, 0x9, 0x2f, 0x7, 0x1, 0x1, 0x3, 0x4, 0x4, 0x80, 0x4, 0x9, 0x3, 0xffffff5b, 0x5, 0x48f, 0x7, 0x0, 0xb753, 0xb7a6, 0xfff, 0x2, 0x9, 0x9, 0x6, 0x3, 0x4, 0x20, 0xe223, 0x80, 0x5, 0xfffffffe, 0x1, 0xfffffffb, 0x100, 0x3, 0x115d, 0xfffffff9, 0x5, 0x2, 0x5, 0x7, 0x6236a69d, 0x1, 0xffffffff, 0x0, 0x0, 0x1, 0x8c, 0x4, 0x8, 0xc, 0x77, 0x9, 0xf, 0x6, 0x1d7, 0x6, 0x9, 0xffffffff, 0x7, 0xf2, 0x5, 0x9, 0x3, 0x3, 0x9, 0x0, 0xc, 0x1, 0x3, 0x1, 0x2, 0x3, 0x1, 0xe0, 0x6, 0x9, 0x9, 0x7, 0x7fff, 0x80000001, 0xa429, 0x6, 0xf20, 0x7fffffff, 0x8, 0x2, 0x0, 0x100, 0x6, 0x7, 0x7, 0x6, 0x7, 0x6, 0x8, 0x8, 0x6, 0x7, 0x0, 0xc06, 0x9, 0xf0, 0x6, 0x7ff, 0xe00, 0x12a4, 0x0, 0x3, 0x8ae0, 0xffffffe7, 0x2, 0x4, 0x9, 0x0, 0x80, 0x10001, 0x7, 0x4, 0x8, 0x4, 0x5, 0x4, 0x4, 0x4, 0xf3, 0xfffffffe, 0x5, 0x0, 0xe22, 0x67, 0x7, 0x0, 0x6, 0x2, 0x1, 0x1, 0x9, 0x4, 0x4d, 0x0, 0x0, 0x55, 0x8000, 0xfd, 0xfffffff7, 0x9, 0x10001, 0x10000, 0x81e, 0xaaa0, 0x3, 0xc60, 0x88, 0x10a6, 0x8, 0xef9f, 0x7, 0x7fff, 0x5, 0x6, 0x8e8, 0x200, 0x0, 0x7ff, 0x0, 0x3, 0x100, 0x1, 0x2, 0x2, 0x0, 0x6, 0x0, 0x5cb6, 0x5, 0x0, 0x7e64, 0x0, 0x3, 0x5, 0x9, 0x254, 0xb86, 0x1ab2e81, 0x30ba, 0xb772, 0xd, 0x6, 0x5, 0x8000, 0x0, 0x0, 0x1, 0x2, 0x67db375a, 0x7fff, 0x80000001, 0x4, 0x9, 0x5, 0x8, 0x3, 0xb00e, 0xf0b, 0x833, 0x5b, 0x3, 0x40, 0x80000001, 0xb, 0x4, 0x2, 0x0, 0x9, 0xf, 0x6, 0x200, 0x1, 0x5, 0x6, 0x7, 0x1ff, 0x8, 0x18, 0xc90, 0x6, 0x0, 0x8, 0x9, 0x800, 0x3, 0x7, 0x1000, 0xc, 0x6, 0x7, 0xfff, 0x9, 0x7fff8000, 0x1, 0xff800000, 0xca, 0x6, 0x3, 0x2, 0x8, 0x5, 0x5, 0xfffffffe, 0x10001, 0x400, 0x3, 0xffffffae, 0x4, 0x3, 0x7, 0x2, 0x9, 0xfffffbff, 0x0, 0x0, 0x4, 0x4, 0x3, 0x5, 0x7, 0x0, 0x1, 0x7, 0x8, 0x7, 0x5, 0x5, 0x404, 0x8, 0x7, 0x9, 0x5, 0x4d1, 0x6, 0x80000000, 0x5, 0x9f, 0x4, 0xfffffff8, 0x7ff, 0x2, 0x40000000, 0xc3, 0xa293, 0x2, 0x9, 0xd, 0x8, 0x3, 0x1fed, 0x8, 0x1, 0x9, 0x3, 0x1, 0xb0, 0x5, 0x42d, 0xfffffff9, 0x4, 0x8001, 0x51, 0x80, 0x6, 0x6, 0x100, 0x0, 0x7, 0x93dd, 0x6, 0x13, 0x81, 0x8, 0x81, 0x2b, 0x0, 0x5, 0x2, 0x2, 0xc3c, 0x4, 0x2, 0x9, 0x4, 0x6, 0x2, 0x8, 0x2, 0x3b, 0x5, 0x0, 0x5, 0x6, 0xf, 0x37, 0xffff, 0xb9, 0xca12, 0x324bc677, 0x0, 0x9, 0xffff, 0xf5, 0x7ff, 0x40, 0x101, 0x0, 0x8, 0x400, 0xbd, 0x0, 0x5, 0x1, 0x3, 0x80, 0x800, 0x4, 0x7f, 0x1, 0x8, 0x7, 0x2, 0x0, 0x6, 0xfffffffa, 0x8, 0xff6, 0x8000000, 0x9, 0x6, 0x8, 0x6, 0x0, 0x4, 0x5, 0x4, 0x0, 0x138a, 0x0, 0x7f, 0x0, 0xfffffff8, 0x1, 0x0, 0x6, 0x2, 0x6, 0x8f, 0x5, 0x3a, 0x8, 0xc0, 0x6a3b, 0x2, 0xffffff86, 0x35, 0x2, 0x8, 0x4, 0xa, 0x2, 0x1, 0x7f000, 0x8, 0x449, 0x9, 0x200, 0x8, 0x86, 0x4, 0x800, 0x4, 0xffff, 0x8, 0x2, 0x5, 0x9, 0x200, 0x6, 0x67, 0xffffffff, 0xfff, 0x3, 0x8, 0x8000, 0x2, 0x12a, 0x8, 0x6, 0x8, 0x25, 0x5, 0x38, 0x5, 0x8, 0x4, 0x39, 0x9745, 0xa2a, 0x81, 0x7, 0x6, 0x4, 0x4, 0xfffffff7, 0x516f, 0x8, 0x1, 0x400, 0x3ff, 0x360, 0x2b0c2d27, 0x0, 0x2, 0x101, 0x12, 0x3, 0xdea, 0x3, 0x6a, 0x1ff, 0x2, 0x6, 0xfffffff8, 0x8001, 0x5, 0x401, 0x2, 0x2, 0x0, 0x1, 0x0, 0x200, 0x10, 0x9, 0x9, 0x3, 0x3, 0x1, 0x3, 0xd, 0x2e0, 0x401, 0x8000, 0x0, 0xae, 0x4, 0x4, 0x6, 0x9f58, 0x9, 0x8, 0x1, 0x2, 0x9, 0x8, 0x2, 0x9, 0x2, 0x20, 0x4, 0xf, 0x401, 0x1, 0x401, 0x3, 0x0, 0x3, 0xc, 0x800, 0x28000000, 0x3, 0x5af9, 0x0, 0xb6c, 0x8, 0xb907, 0x4, 0x7, 0xffff2d21, 0x485, 0x1000, 0x6, 0x4, 0x1, 0x81, 0x2, 0xbd1e, 0x6, 0x33, 0xd, 0x80, 0x8, 0xf9, 0x7fffffff, 0x10001, 0x11, 0x1, 0xe, 0x0, 0x4, 0x9, 0xffffffff, 0x7, 0x9, 0x5, 0x7f1f, 0x7, 0x7, 0x8, 0x3, 0x7, 0xc, 0x7, 0x3, 0x0, 0x2, 0x40, 0xd, 0x9, 0x9, 0x200, 0x40, 0x31cc, 0xffff56d2, 0x20000000, 0xfff, 0x9, 0x5, 0x5, 0xfffffff9, 0x0, 0xff, 0x100, 0x3, 0x6, 0x0, 0x8b, 0x200, 0x80, 0x2, 0xffff, 0x8001, 0xd8c7378, 0x1, 0x4, 0x0, 0x5, 0x3, 0x3, 0x1, 0xdc5e, 0x0, 0x4, 0x3b, 0xffff, 0x1, 0xffffffff, 0xffff, 0x1, 0x400, 0x0, 0x2, 0x5, 0x1000, 0x8000, 0xfffffeff, 0x620a, 0x5, 0x2, 0x0, 0x8, 0x4, 0xdc, 0x2, 0xe, 0x7, 0x140000, 0xfffffff7, 0x1ff, 0x0, 0xb, 0xfd, 0xdd18, 0x0, 0x1, 0x40, 0x5, 0x7c43, 0x4, 0x2c, 0xffff, 0x8, 0x6, 0x200, 0x9, 0xffff, 0x9f, 0x6, 0x3, 0x100, 0x2, 0x9, 0x2, 0x9, 0x1, 0x100, 0x7, 0x5, 0xe, 0x24, 0x8001, 0x6, 0x8000, 0x3, 0xf2, 0x2, 0x1, 0x10001, 0xdeca, 0x4, 0xea, 0x6, 0x3, 0x8, 0x7ff, 0x9, 0x0, 0x8, 0x5b, 0x9, 0x4, 0xff, 0xbf02, 0x2e90a212, 0x40000c, 0x8, 0x20000000, 0x6, 0xffff, 0xfffff801, 0x2], 0x2, 0x400, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000b00)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x16b8c5b5213a03b5}) executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x2, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x298) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: bisecting 44 programs bisect: split chunks (needed=false): <44> bisect: split chunk #0 of len 44 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 24, 2, 2, 19, 1, 24, 30, 5, 10, 2, 28, 5, 6, 4, 5, 30, 30, 9, 4, 14, 2, 1, 2, 23, 4, 5, 28, 2] detailed listing: executing program 0: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) unshare(0x22020600) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, &(0x7f00000025c0)=""/102398, &(0x7f000001b5c0)=0x18ffe) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0xffbffff7, 0xffffffff, 0x1}, 0x10) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000fd3f0000000000000900000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f0000000400), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000440)={0x20000014}) epoll_wait(r4, &(0x7f0000000480)=[{}], 0x1, 0x400) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/4100, 0x1004) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x4000040) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000ac0)={0x8cb, "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"}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000240)=0x1002, 0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000002000000d00000000000f00183400000a180500000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000440)={0x0, 0xf, 0x1, "ed"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000001080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x8, 0x24200) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, &(0x7f00000002c0)={0x20, 0x22, 0xeb, {0xeb, 0x21, "5669c367224f441d849f1dc874d6981fdf93c15d2c92ff32d5cc10f4adc572432a2d87ff04cd40d57621525e8808ff4f47dbb374b19616cd22b818503783d70c0071e0083309d691c82459445b4ae80b0da4c02db4abd9286c524ddbca6d6902f01a44fc02971bf57631066ba294f2ad304afc6dcfe7a3395235ee52a3c0cc447f29cad6e5a06e94719807cf01db62e0157bd977d8eeef95e90c88be3c9a09df823b40245d4e6de5c154d31a6482c244bfc244ab8237efebb27ea38d697ba9c9a671622286d7a1acf3abd4b25aa989f8e5bb8308ea55ad48a68637d7a10773f11c45668ebbfd6972ad"}}, &(0x7f0000000480)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "66fb9b8b4c0742e9f2ccf197843e5b0e385a48bc30bc65f886595bf3aaba89f860ffe0745abb36f20358517ecde72926e5aa1f38bef760a2612a0378360eaff5e797b44ed498a79d088dce469569bb006830f5bb8b11c1907f3ec1afc0e678cf4b39d8efac4c45e0579d49ff14935807bc9ceb43cd0e352ef681cd1a7b45c9e0fcb7f813b730e622688c1fcf1c7da0403a52cd4aed74b53b2abf76f17847224be73a69cbf2e89c78462133be6a9909b9d88a7dafbe96b3aa8cb5117624fef455bcce97f9d22446a214a63e044bbd0af4964e60bc6782"}}}, &(0x7f0000000740)={0x2c, &(0x7f00000005c0)={0x0, 0x30, 0x26, "bb36fefcf5796d5c2c0b06284bfc87f7cde617e7e236fc6b3d6166c8ee7c1237690c9ce40a8d"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000006c0)={0xc0, 0x5, 0x6, "2ea444361736"}, &(0x7f0000000700)={0x40, 0x5, 0x5, "5e75c73377"}}) syz_usb_control_io$printer(r0, 0x0, 0x0) executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000ff8000000000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000030000000000000400000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) executing program 2: symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00') (async) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0xe00008da) (async, rerun: 32) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./bus\x00') (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x40) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480), 0x140, 0x0) r3 = dup(r2) read(r3, &(0x7f00000004c0)=""/189, 0xbd) fadvise64(r3, 0x3, 0x4000000005, 0x4) (async, rerun: 32) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)=0x20000) (async, rerun: 32) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000280)={0x101, 0x3, 0xfd}) (async) ioctl$MEMREAD(r1, 0xc0404d1a, &(0x7f0000000440)={0x8, 0x63, 0xd7, &(0x7f00000002c0)=""/99, &(0x7f0000000340)=""/215, 0x1, '\x00', {0xc3, 0x886, 0x55}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x42) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x3) executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) executing program 2: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) unshare(0x22020600) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, &(0x7f00000025c0)=""/102398, &(0x7f000001b5c0)=0x18ffe) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0xffbffff7, 0xffffffff, 0x1}, 0x10) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000fd3f0000000000000900000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000003c0), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000400), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000440)={0x20000014}) epoll_wait(r2, &(0x7f0000000480)=[{}], 0x1, 0x400) ppoll(&(0x7f00000004c0)=[{r2, 0x401}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$kcm(0x10, 0x2, 0x4) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/4100, 0x1004) executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) keyctl$dh_compute(0x17, &(0x7f0000000980), 0x0, 0x0, &(0x7f00000009c0)={0x0}) r3 = syz_open_dev$sndctrl(&(0x7f0000000a00), 0x84, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0485510, &(0x7f0000000a40)={0x0, 0x1, 0x1, 0x0, &(0x7f0000000ac0)=[{}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000b40)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0x1, 0x0, 0x2, 0x4, 0x0, 0x7, 0x8004, 0xa, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000b80)='X', 0x34000, 0x0, &(0x7f0000000bc0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000c00)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000cc0)={{0x0, 0xeeee0000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x5, 0x9, 0x10}, {0xffff1000, 0x200000, 0xd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x7}, {0x2000, 0x5000, 0xc, 0xff, 0x4, 0x4, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6, 0xfc}, {0x6000, 0xfffef001, 0x9, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x83}, {0xdddd0000, 0xb000, 0x0, 0x35, 0x3, 0x0, 0x42, 0x0, 0x0, 0x0, 0x3}, {0xeeef0000, 0xe6e31000, 0x8, 0xfe, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x30000, 0x2000, 0xf, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26, 0x0, 0x0, 0x1}, {0x80a0000, 0x807}, {0x7000}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0xfffffffffffffffc, 0x0, 0x0, [0x0, 0xe4, 0x1, 0x40]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000740), 0x8, 0x10, &(0x7f0000000780), 0x3f}, 0x16) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r5) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000e40)={'syzkaller0\x00', 0x1}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=@newtfilter={0x74, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1, 0xf}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xf, 0x800, 0x5, 0xf738, {0xb, 0x2, 0x0, 0x2, 0x200, 0x1}, {0x2, 0x1, 0x1, 0x0, 0xffff}, 0xd8, 0xeb}}]}]}}]}, 0x74}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000840)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x8004) executing program 4: unshare(0x6020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000002c0)={0x3, 0x0, 0xfffff3a2}) executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80001001300100000000000fbdbdf25fc000000000000000000000000000000fc000000000000000000000000000001000000044e2400000a0060203b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0xfffffffffffffdee, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x40000001}, 0x24004000) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000ffffff8000000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc01000000000000000080ff00000000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) (async) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001740)={{r0}, r1, 0x18, @inherit={0x98, &(0x7f00000003c0)={0x1, 0xa, 0xef, 0x3, {0x0, 0x7, 0x1, 0x8000000000000000, 0x6}, [0x48c9, 0x4, 0xc010, 0xfffffffffffffffc, 0x1000, 0x5c8d, 0x9, 0x8001, 0x1, 0xff]}}, @subvolid=0x2}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001740)={{r0}, r1, 0x18, @inherit={0x98, &(0x7f00000003c0)={0x1, 0xa, 0xef, 0x3, {0x0, 0x7, 0x1, 0x8000000000000000, 0x6}, [0x48c9, 0x4, 0xc010, 0xfffffffffffffffc, 0x1000, 0x5c8d, 0x9, 0x8001, 0x1, 0xff]}}, @subvolid=0x2}) poll(0x0, 0x0, 0x2) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) (async) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044402, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000001c0)={0x0, 0x0, 0x10001, 0x5}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000000700)={0xc, {"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", 0x1000}}, 0x104a) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0002003c0001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010400028005000100010000003c000380"], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000003f0026012bbd700000000000117c00000400fc800c00018055fd0400", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000140007000001000000000000000000000000000100009d00", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) executing program 0: syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8a16, 0x3a10, 0x3, 0x31d}, &(0x7f0000000500), &(0x7f0000000580), &(0x7f0000000180)) syz_clone(0x100111, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) r0 = eventfd(0x0) io_submit(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xc2, r0, &(0x7f0000000140)="0100fd6400000000", 0x8, 0x36, 0x0, 0x0, r0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001701000001e500000000d8936e75a545998a2db3c561ef65a300000000000018000000000000001701000004000000fffbffff00000000"], 0x30, 0x40}], 0x1, 0x40800) executing program 6: unshare(0x6020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000002c0)={0x3, 0x0, 0xfffff3a2}) executing program 6: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) read(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r9, 0x80000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000cc0)) lseek(r0, 0x0, 0x3) r10 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) r11 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x10, 0x81, 0x80, 0x4}, {0x9, 0x5, 0xe, 0x2, 0x10, 0xd, 0xa, 0x9}, {0x9, 0x5, 0x9, 0x3, 0x20, 0x0, 0x0, 0xfd}}}}}}]}}, 0x0) syz_usb_ep_write(r11, 0x7, 0x9, &(0x7f0000000300)="39151cdff086a4bbcb") executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r2, @ANYBLOB="5c005a80140001800500070001000000050006000100000044000380120001000c"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000000c0)="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") r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0x3}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffe0f, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r8 = socket$inet6(0xa, 0x2, 0x0) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f0000008880), 0x45b, 0x2, 0x0) unshare(0x62020400) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r9, 0x0, 0x5, &(0x7f0000000240)={@loopback, @multicast2, 0xfffb, "66c5aff8a7eb17f1f6cec2e7780795478c84aea31700", 0x96bf, 0x2, 0x7a, 0x6b}, 0x3c) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000000), 0x4) socket(0x10, 0x3, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4001010) executing program 2: madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r0, &(0x7f0000000740)='0', 0x1) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\t/'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000780)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000020a09040000000000000000020000000900010073797a3000000000090001e173797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0x74}, 0x1, 0xf5ffffff}, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x80000000000000a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) epoll_create(0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309180008000a00", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800070008000000062102000100000008000500", @ANYRES16=r0], 0x54}, 0x1, 0x0, 0x5000000, 0x24004845}, 0x8000002) executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000ffffff800000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) executing program 5: r0 = syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000500)=ANY=[@ANYBLOB="120110030000004035120182400001020301090286080000003009080b00010107208c0904000000010120000924010040041d000708240a0001ff23030c240302"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="004e82a3adfc8c4409e6f5030400000004034308"], 0x0, 0x0, 0x0}, 0x0) executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'team0\x00', 0x1}, 0x18) close(0x3) r1 = syz_open_dev$sndpcmc(&(0x7f0000000540), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f00000009c0)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000c40)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1c79, &(0x7f0000000d00)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000e40)=0x7) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000020000008520000004000000184a00000200000000000000000000007c94000010000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r6, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x80}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2f}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x4}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x4880) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000180)) executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001701000001e500000000d8936e75a545998a2db3c561ef65a300000000000018000000000000001701000004000000fffbffff00000000"], 0x30, 0x40}], 0x1, 0x40800) executing program 6: unshare(0x6020400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000200)={0x4004, r0, 0x2}) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, 0x0) executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x12, 0x0, {0xc, 0xd}, {0xc, 0x5}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048810}, 0x2000000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f00000005c0)={0xdf, 0x0, 0x80000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x4, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001b80)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0x270, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) mprotect(&(0x7f0000e15000/0x2000)=nil, 0x2000, 0x2) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000001f80)={'ip6_vti0\x00', &(0x7f0000001fc0)=@ethtool_cmd={0x41, 0x5, 0x3, 0x0, 0x7, 0x0, 0x0, 0xfc, 0x0, 0xfc, 0x0, 0xfffffff9, 0x0, 0xff, 0x0, 0x45, [0x0, 0x6]}}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f0000019100400014000200100011"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000100)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000240)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x1, 0x5f6, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x24}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_open_dev$media(&(0x7f00000003c0), 0x6be, 0xc8683) ioctl$MEDIA_IOC_REQUEST_ALLOC(r10, 0x80047c05, &(0x7f0000000480)) r11 = dup(r9) syz_ublk_setup_queues(r11, r8, &(0x7f0000000340)={0x0, 0x20fb87, 0x1, 0xfffffffd, 0x32c}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xba5e, 0x8000, 0x1006, 0x160, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6605, 0x200, 0x10000000, 0x546}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88db, 0x10000, 0x3, 0xfffffffc, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000000, 0x8000, 0x2, 0xbd, 0x0, r3}}], 0x1, &(0x7f0000000540)={0x2e, 0x54, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r7, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) ioctl$MEMREADOOB(r11, 0xc0104d04, &(0x7f0000000500)={0x6, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_modify_offsets$flags(r4, r12, 0x38, 0xfffffffa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x14) syz_usb_connect(0x3, 0x96d, &(0x7f0000000a80)=ANY=[@ANYBLOB="12010102e21b5140b1134200e8a90102030109025b09040d9720090904320409f073ea09090503002000f80040090504104000"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r11, 0x7b2, &(0x7f0000001b40)={&(0x7f0000000b40)=[0x5, 0xaa4, 0xdb, 0x7, 0xd, 0x800, 0x401, 0xf, 0x4, 0x6, 0x800, 0x40, 0x6, 0x4, 0xfffffffe, 0x40d, 0xff, 0x1, 0xc6, 0x100, 0x6, 0x3, 0x80000001, 0xbfb, 0x2, 0x6, 0x8, 0x6, 0x5, 0x64fe2241, 0x6, 0x5, 0x8, 0x8, 0x8b, 0x2, 0x69, 0x3, 0x6, 0xadb433a, 0x10000, 0xffff96d0, 0x0, 0x0, 0x0, 0x2, 0x1000, 0x401, 0x5, 0x0, 0x8001, 0x400, 0x2, 0x5, 0x80, 0x400, 0x5, 0x9, 0x80000001, 0x10001, 0x9, 0x4, 0x8000, 0x7, 0x1, 0x7, 0xffff8000, 0xfffffff7, 0x5, 0x6, 0x0, 0x1, 0xfffffffc, 0x7, 0x7ff, 0x8000, 0x4, 0x2, 0x6, 0x0, 0x2, 0x2, 0x86b, 0x3, 0x5, 0x65c8049d, 0x8, 0x8, 0x6, 0x2, 0xe1, 0x9, 0x6, 0x4, 0x0, 0x3, 0x5, 0x101, 0x9, 0x3, 0x0, 0x0, 0x2, 0x3, 0x3, 0x80000001, 0x5664, 0x80, 0x75, 0x3, 0x8, 0xee, 0x8000, 0x1, 0x10000, 0x7f, 0xa4c, 0x5, 0x80, 0xb, 0x8, 0xb, 0xd, 0xfffffffe, 0x9, 0x1432, 0x0, 0x0, 0x6, 0x1, 0xdb71, 0xffff, 0x4, 0x101, 0x3, 0xc3b9, 0x1, 0x2, 0xb1e4, 0x9, 0x3, 0xe, 0x80000001, 0x8, 0x401, 0x1, 0x7, 0x2, 0x385, 0xde, 0xab84, 0xde, 0x8001, 0x7, 0x7, 0x8000, 0x9, 0x2, 0x2, 0x9, 0x2, 0x5, 0x9, 0x0, 0x6, 0x2, 0x5, 0x81, 0x1000, 0x7, 0x4, 0x40, 0x2, 0x8, 0x10000, 0x9, 0xfffffffe, 0x2, 0xfffffffb, 0x5, 0x1, 0x1, 0x10, 0x2549, 0x5, 0x200, 0x0, 0xeb2, 0x3, 0x2, 0x2, 0xc, 0x6, 0x3ff, 0xffffe3dc, 0x2, 0x9, 0x8, 0xffffdd5e, 0x80, 0xfff, 0x2, 0x1, 0x0, 0x200, 0xe48d, 0xfffff8ee, 0xb1, 0x81, 0xeb, 0x3, 0x0, 0x1, 0x80000001, 0x5, 0x1ff, 0x7, 0x7, 0x5, 0x2, 0x6a38bf39, 0x6, 0x7ff, 0x1bb800, 0x7, 0x5, 0x4, 0x3ff, 0x81, 0x8000, 0x7f, 0x66, 0xffffffff, 0x80, 0x9, 0x0, 0x226a, 0x8, 0x4, 0x790, 0x0, 0xffff8001, 0x8f, 0xbbf, 0x5, 0xffff, 0x9, 0xb83, 0x5, 0x0, 0x6, 0x4, 0x3b, 0x2, 0x8001, 0x8, 0xb9e, 0x6, 0x3, 0x0, 0x9, 0x6, 0x3, 0xfffffff9, 0x7ff, 0x100, 0x0, 0x81, 0x3ff, 0x8, 0x400, 0x9, 0x4, 0x7, 0x8, 0x6, 0x11, 0x1, 0xfffffffd, 0x5, 0xe7cb, 0x3, 0x5, 0xc, 0xff, 0x400, 0x4, 0xb30, 0xe4, 0x7fffffff, 0x9, 0x7, 0xa, 0x1afa, 0x2, 0x6, 0x2, 0x6, 0x1, 0x5, 0x9, 0x2, 0x8001, 0xe, 0x1, 0xfffffffe, 0x2, 0x0, 0x7, 0x66, 0xfffffffa, 0x5, 0x6, 0xe, 0x4, 0x2, 0xe38, 0x3, 0x80, 0xdb23, 0x1, 0x6456, 0x6000000, 0x8, 0xffff, 0x9, 0x0, 0x8d, 0x56, 0xb, 0x2, 0x4, 0x7ff, 0x8, 0x0, 0x9, 0x2f, 0x7, 0x1, 0x1, 0x3, 0x4, 0x4, 0x80, 0x4, 0x9, 0x3, 0xffffff5b, 0x5, 0x48f, 0x7, 0x0, 0xb753, 0xb7a6, 0xfff, 0x2, 0x9, 0x9, 0x6, 0x3, 0x4, 0x20, 0xe223, 0x80, 0x5, 0xfffffffe, 0x1, 0xfffffffb, 0x100, 0x3, 0x115d, 0xfffffff9, 0x5, 0x2, 0x5, 0x7, 0x6236a69d, 0x1, 0xffffffff, 0x0, 0x0, 0x1, 0x8c, 0x4, 0x8, 0xc, 0x77, 0x9, 0xf, 0x6, 0x1d7, 0x6, 0x9, 0xffffffff, 0x7, 0xf2, 0x5, 0x9, 0x3, 0x3, 0x9, 0x0, 0xc, 0x1, 0x3, 0x1, 0x2, 0x3, 0x1, 0xe0, 0x6, 0x9, 0x9, 0x7, 0x7fff, 0x80000001, 0xa429, 0x6, 0xf20, 0x7fffffff, 0x8, 0x2, 0x0, 0x100, 0x6, 0x7, 0x7, 0x6, 0x7, 0x6, 0x8, 0x8, 0x6, 0x7, 0x0, 0xc06, 0x9, 0xf0, 0x6, 0x7ff, 0xe00, 0x12a4, 0x0, 0x3, 0x8ae0, 0xffffffe7, 0x2, 0x4, 0x9, 0x0, 0x80, 0x10001, 0x7, 0x4, 0x8, 0x4, 0x5, 0x4, 0x4, 0x4, 0xf3, 0xfffffffe, 0x5, 0x0, 0xe22, 0x67, 0x7, 0x0, 0x6, 0x2, 0x1, 0x1, 0x9, 0x4, 0x4d, 0x0, 0x0, 0x55, 0x8000, 0xfd, 0xfffffff7, 0x9, 0x10001, 0x10000, 0x81e, 0xaaa0, 0x3, 0xc60, 0x88, 0x10a6, 0x8, 0xef9f, 0x7, 0x7fff, 0x5, 0x6, 0x8e8, 0x200, 0x0, 0x7ff, 0x0, 0x3, 0x100, 0x1, 0x2, 0x2, 0x0, 0x6, 0x0, 0x5cb6, 0x5, 0x0, 0x7e64, 0x0, 0x3, 0x5, 0x9, 0x254, 0xb86, 0x1ab2e81, 0x30ba, 0xb772, 0xd, 0x6, 0x5, 0x8000, 0x0, 0x0, 0x1, 0x2, 0x67db375a, 0x7fff, 0x80000001, 0x4, 0x9, 0x5, 0x8, 0x3, 0xb00e, 0xf0b, 0x833, 0x5b, 0x3, 0x40, 0x80000001, 0xb, 0x4, 0x2, 0x0, 0x9, 0xf, 0x6, 0x200, 0x1, 0x5, 0x6, 0x7, 0x1ff, 0x8, 0x18, 0xc90, 0x6, 0x0, 0x8, 0x9, 0x800, 0x3, 0x7, 0x1000, 0xc, 0x6, 0x7, 0xfff, 0x9, 0x7fff8000, 0x1, 0xff800000, 0xca, 0x6, 0x3, 0x2, 0x8, 0x5, 0x5, 0xfffffffe, 0x10001, 0x400, 0x3, 0xffffffae, 0x4, 0x3, 0x7, 0x2, 0x9, 0xfffffbff, 0x0, 0x0, 0x4, 0x4, 0x3, 0x5, 0x7, 0x0, 0x1, 0x7, 0x8, 0x7, 0x5, 0x5, 0x404, 0x8, 0x7, 0x9, 0x5, 0x4d1, 0x6, 0x80000000, 0x5, 0x9f, 0x4, 0xfffffff8, 0x7ff, 0x2, 0x40000000, 0xc3, 0xa293, 0x2, 0x9, 0xd, 0x8, 0x3, 0x1fed, 0x8, 0x1, 0x9, 0x3, 0x1, 0xb0, 0x5, 0x42d, 0xfffffff9, 0x4, 0x8001, 0x51, 0x80, 0x6, 0x6, 0x100, 0x0, 0x7, 0x93dd, 0x6, 0x13, 0x81, 0x8, 0x81, 0x2b, 0x0, 0x5, 0x2, 0x2, 0xc3c, 0x4, 0x2, 0x9, 0x4, 0x6, 0x2, 0x8, 0x2, 0x3b, 0x5, 0x0, 0x5, 0x6, 0xf, 0x37, 0xffff, 0xb9, 0xca12, 0x324bc677, 0x0, 0x9, 0xffff, 0xf5, 0x7ff, 0x40, 0x101, 0x0, 0x8, 0x400, 0xbd, 0x0, 0x5, 0x1, 0x3, 0x80, 0x800, 0x4, 0x7f, 0x1, 0x8, 0x7, 0x2, 0x0, 0x6, 0xfffffffa, 0x8, 0xff6, 0x8000000, 0x9, 0x6, 0x8, 0x6, 0x0, 0x4, 0x5, 0x4, 0x0, 0x138a, 0x0, 0x7f, 0x0, 0xfffffff8, 0x1, 0x0, 0x6, 0x2, 0x6, 0x8f, 0x5, 0x3a, 0x8, 0xc0, 0x6a3b, 0x2, 0xffffff86, 0x35, 0x2, 0x8, 0x4, 0xa, 0x2, 0x1, 0x7f000, 0x8, 0x449, 0x9, 0x200, 0x8, 0x86, 0x4, 0x800, 0x4, 0xffff, 0x8, 0x2, 0x5, 0x9, 0x200, 0x6, 0x67, 0xffffffff, 0xfff, 0x3, 0x8, 0x8000, 0x2, 0x12a, 0x8, 0x6, 0x8, 0x25, 0x5, 0x38, 0x5, 0x8, 0x4, 0x39, 0x9745, 0xa2a, 0x81, 0x7, 0x6, 0x4, 0x4, 0xfffffff7, 0x516f, 0x8, 0x1, 0x400, 0x3ff, 0x360, 0x2b0c2d27, 0x0, 0x2, 0x101, 0x12, 0x3, 0xdea, 0x3, 0x6a, 0x1ff, 0x2, 0x6, 0xfffffff8, 0x8001, 0x5, 0x401, 0x2, 0x2, 0x0, 0x1, 0x0, 0x200, 0x10, 0x9, 0x9, 0x3, 0x3, 0x1, 0x3, 0xd, 0x2e0, 0x401, 0x8000, 0x0, 0xae, 0x4, 0x4, 0x6, 0x9f58, 0x9, 0x8, 0x1, 0x2, 0x9, 0x8, 0x2, 0x9, 0x2, 0x20, 0x4, 0xf, 0x401, 0x1, 0x401, 0x3, 0x0, 0x3, 0xc, 0x800, 0x28000000, 0x3, 0x5af9, 0x0, 0xb6c, 0x8, 0xb907, 0x4, 0x7, 0xffff2d21, 0x485, 0x1000, 0x6, 0x4, 0x1, 0x81, 0x2, 0xbd1e, 0x6, 0x33, 0xd, 0x80, 0x8, 0xf9, 0x7fffffff, 0x10001, 0x11, 0x1, 0xe, 0x0, 0x4, 0x9, 0xffffffff, 0x7, 0x9, 0x5, 0x7f1f, 0x7, 0x7, 0x8, 0x3, 0x7, 0xc, 0x7, 0x3, 0x0, 0x2, 0x40, 0xd, 0x9, 0x9, 0x200, 0x40, 0x31cc, 0xffff56d2, 0x20000000, 0xfff, 0x9, 0x5, 0x5, 0xfffffff9, 0x0, 0xff, 0x100, 0x3, 0x6, 0x0, 0x8b, 0x200, 0x80, 0x2, 0xffff, 0x8001, 0xd8c7378, 0x1, 0x4, 0x0, 0x5, 0x3, 0x3, 0x1, 0xdc5e, 0x0, 0x4, 0x3b, 0xffff, 0x1, 0xffffffff, 0xffff, 0x1, 0x400, 0x0, 0x2, 0x5, 0x1000, 0x8000, 0xfffffeff, 0x620a, 0x5, 0x2, 0x0, 0x8, 0x4, 0xdc, 0x2, 0xe, 0x7, 0x140000, 0xfffffff7, 0x1ff, 0x0, 0xb, 0xfd, 0xdd18, 0x0, 0x1, 0x40, 0x5, 0x7c43, 0x4, 0x2c, 0xffff, 0x8, 0x6, 0x200, 0x9, 0xffff, 0x9f, 0x6, 0x3, 0x100, 0x2, 0x9, 0x2, 0x9, 0x1, 0x100, 0x7, 0x5, 0xe, 0x24, 0x8001, 0x6, 0x8000, 0x3, 0xf2, 0x2, 0x1, 0x10001, 0xdeca, 0x4, 0xea, 0x6, 0x3, 0x8, 0x7ff, 0x9, 0x0, 0x8, 0x5b, 0x9, 0x4, 0xff, 0xbf02, 0x2e90a212, 0x40000c, 0x8, 0x20000000, 0x6, 0xffff, 0xfffff801, 0x2], 0x2, 0x400, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000b00)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x16b8c5b5213a03b5}) executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x2, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x298) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 30, 30, 9, 4, 14, 2, 1, 2, 23, 4, 5, 28, 2] detailed listing: executing program 6: unshare(0x6020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000002c0)={0x3, 0x0, 0xfffff3a2}) executing program 6: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) read(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r9, 0x80000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000cc0)) lseek(r0, 0x0, 0x3) r10 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) r11 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x10, 0x81, 0x80, 0x4}, {0x9, 0x5, 0xe, 0x2, 0x10, 0xd, 0xa, 0x9}, {0x9, 0x5, 0x9, 0x3, 0x20, 0x0, 0x0, 0xfd}}}}}}]}}, 0x0) syz_usb_ep_write(r11, 0x7, 0x9, &(0x7f0000000300)="39151cdff086a4bbcb") executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r2, @ANYBLOB="5c005a80140001800500070001000000050006000100000044000380120001000c"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000000c0)="261c650907466d64355c999fb6031568bb8e99e42d667133edebbadb66f5cd072411805bfd8a83b7b24ee59561b1b922cbc32eff7021bbdfe246b47aec70a7f9171ef038bcfe36cc54a4acc9fc2cc5dee644ecf3b53a260efb181acf65ad285183497ab11313e373939f7aa76586ef2c3a2eba8b2f7d48722fbf9491d64ae37cfc5765b1d01ec554296171b110bb44a9b2b6d66f3187061b6da8c6391e4d7048444ab57d41fff90b67ed5f776b15f9648d59aaa1eb094a2f771777fc32388f24ca2eb127b2add51ba90602c6894433e90d4a3435c3efdfbc197f4b1b671c2d65f809749d04b0200fcab16cb901931634a27cccd4a6b656f92c709d48c34f00f1") r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0x3}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffe0f, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r8 = socket$inet6(0xa, 0x2, 0x0) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f0000008880), 0x45b, 0x2, 0x0) unshare(0x62020400) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r9, 0x0, 0x5, &(0x7f0000000240)={@loopback, @multicast2, 0xfffb, "66c5aff8a7eb17f1f6cec2e7780795478c84aea31700", 0x96bf, 0x2, 0x7a, 0x6b}, 0x3c) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000000), 0x4) socket(0x10, 0x3, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4001010) executing program 2: madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r0, &(0x7f0000000740)='0', 0x1) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\t/'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000780)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000020a09040000000000000000020000000900010073797a3000000000090001e173797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0x74}, 0x1, 0xf5ffffff}, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x80000000000000a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) epoll_create(0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309180008000a00", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800070008000000062102000100000008000500", @ANYRES16=r0], 0x54}, 0x1, 0x0, 0x5000000, 0x24004845}, 0x8000002) executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000ffffff800000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) executing program 5: r0 = syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000500)=ANY=[@ANYBLOB="120110030000004035120182400001020301090286080000003009080b00010107208c0904000000010120000924010040041d000708240a0001ff23030c240302"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="004e82a3adfc8c4409e6f5030400000004034308"], 0x0, 0x0, 0x0}, 0x0) executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'team0\x00', 0x1}, 0x18) close(0x3) r1 = syz_open_dev$sndpcmc(&(0x7f0000000540), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f00000009c0)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000c40)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1c79, &(0x7f0000000d00)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000e40)=0x7) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000020000008520000004000000184a00000200000000000000000000007c94000010000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r6, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x80}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2f}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x4}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x4880) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000180)) executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001701000001e500000000d8936e75a545998a2db3c561ef65a300000000000018000000000000001701000004000000fffbffff00000000"], 0x30, 0x40}], 0x1, 0x40800) executing program 6: unshare(0x6020400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000200)={0x4004, r0, 0x2}) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, 0x0) executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x12, 0x0, {0xc, 0xd}, {0xc, 0x5}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048810}, 0x2000000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f00000005c0)={0xdf, 0x0, 0x80000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x4, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001b80)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0x270, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) mprotect(&(0x7f0000e15000/0x2000)=nil, 0x2000, 0x2) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000001f80)={'ip6_vti0\x00', &(0x7f0000001fc0)=@ethtool_cmd={0x41, 0x5, 0x3, 0x0, 0x7, 0x0, 0x0, 0xfc, 0x0, 0xfc, 0x0, 0xfffffff9, 0x0, 0xff, 0x0, 0x45, [0x0, 0x6]}}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f0000019100400014000200100011"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000100)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000240)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x1, 0x5f6, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x24}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_open_dev$media(&(0x7f00000003c0), 0x6be, 0xc8683) ioctl$MEDIA_IOC_REQUEST_ALLOC(r10, 0x80047c05, &(0x7f0000000480)) r11 = dup(r9) syz_ublk_setup_queues(r11, r8, &(0x7f0000000340)={0x0, 0x20fb87, 0x1, 0xfffffffd, 0x32c}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xba5e, 0x8000, 0x1006, 0x160, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6605, 0x200, 0x10000000, 0x546}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88db, 0x10000, 0x3, 0xfffffffc, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000000, 0x8000, 0x2, 0xbd, 0x0, r3}}], 0x1, &(0x7f0000000540)={0x2e, 0x54, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r7, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) ioctl$MEMREADOOB(r11, 0xc0104d04, &(0x7f0000000500)={0x6, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_modify_offsets$flags(r4, r12, 0x38, 0xfffffffa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x14) syz_usb_connect(0x3, 0x96d, &(0x7f0000000a80)=ANY=[@ANYBLOB="12010102e21b5140b1134200e8a90102030109025b09040d9720090904320409f073ea09090503002000f80040090504104000"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r11, 0x7b2, &(0x7f0000001b40)={&(0x7f0000000b40)=[0x5, 0xaa4, 0xdb, 0x7, 0xd, 0x800, 0x401, 0xf, 0x4, 0x6, 0x800, 0x40, 0x6, 0x4, 0xfffffffe, 0x40d, 0xff, 0x1, 0xc6, 0x100, 0x6, 0x3, 0x80000001, 0xbfb, 0x2, 0x6, 0x8, 0x6, 0x5, 0x64fe2241, 0x6, 0x5, 0x8, 0x8, 0x8b, 0x2, 0x69, 0x3, 0x6, 0xadb433a, 0x10000, 0xffff96d0, 0x0, 0x0, 0x0, 0x2, 0x1000, 0x401, 0x5, 0x0, 0x8001, 0x400, 0x2, 0x5, 0x80, 0x400, 0x5, 0x9, 0x80000001, 0x10001, 0x9, 0x4, 0x8000, 0x7, 0x1, 0x7, 0xffff8000, 0xfffffff7, 0x5, 0x6, 0x0, 0x1, 0xfffffffc, 0x7, 0x7ff, 0x8000, 0x4, 0x2, 0x6, 0x0, 0x2, 0x2, 0x86b, 0x3, 0x5, 0x65c8049d, 0x8, 0x8, 0x6, 0x2, 0xe1, 0x9, 0x6, 0x4, 0x0, 0x3, 0x5, 0x101, 0x9, 0x3, 0x0, 0x0, 0x2, 0x3, 0x3, 0x80000001, 0x5664, 0x80, 0x75, 0x3, 0x8, 0xee, 0x8000, 0x1, 0x10000, 0x7f, 0xa4c, 0x5, 0x80, 0xb, 0x8, 0xb, 0xd, 0xfffffffe, 0x9, 0x1432, 0x0, 0x0, 0x6, 0x1, 0xdb71, 0xffff, 0x4, 0x101, 0x3, 0xc3b9, 0x1, 0x2, 0xb1e4, 0x9, 0x3, 0xe, 0x80000001, 0x8, 0x401, 0x1, 0x7, 0x2, 0x385, 0xde, 0xab84, 0xde, 0x8001, 0x7, 0x7, 0x8000, 0x9, 0x2, 0x2, 0x9, 0x2, 0x5, 0x9, 0x0, 0x6, 0x2, 0x5, 0x81, 0x1000, 0x7, 0x4, 0x40, 0x2, 0x8, 0x10000, 0x9, 0xfffffffe, 0x2, 0xfffffffb, 0x5, 0x1, 0x1, 0x10, 0x2549, 0x5, 0x200, 0x0, 0xeb2, 0x3, 0x2, 0x2, 0xc, 0x6, 0x3ff, 0xffffe3dc, 0x2, 0x9, 0x8, 0xffffdd5e, 0x80, 0xfff, 0x2, 0x1, 0x0, 0x200, 0xe48d, 0xfffff8ee, 0xb1, 0x81, 0xeb, 0x3, 0x0, 0x1, 0x80000001, 0x5, 0x1ff, 0x7, 0x7, 0x5, 0x2, 0x6a38bf39, 0x6, 0x7ff, 0x1bb800, 0x7, 0x5, 0x4, 0x3ff, 0x81, 0x8000, 0x7f, 0x66, 0xffffffff, 0x80, 0x9, 0x0, 0x226a, 0x8, 0x4, 0x790, 0x0, 0xffff8001, 0x8f, 0xbbf, 0x5, 0xffff, 0x9, 0xb83, 0x5, 0x0, 0x6, 0x4, 0x3b, 0x2, 0x8001, 0x8, 0xb9e, 0x6, 0x3, 0x0, 0x9, 0x6, 0x3, 0xfffffff9, 0x7ff, 0x100, 0x0, 0x81, 0x3ff, 0x8, 0x400, 0x9, 0x4, 0x7, 0x8, 0x6, 0x11, 0x1, 0xfffffffd, 0x5, 0xe7cb, 0x3, 0x5, 0xc, 0xff, 0x400, 0x4, 0xb30, 0xe4, 0x7fffffff, 0x9, 0x7, 0xa, 0x1afa, 0x2, 0x6, 0x2, 0x6, 0x1, 0x5, 0x9, 0x2, 0x8001, 0xe, 0x1, 0xfffffffe, 0x2, 0x0, 0x7, 0x66, 0xfffffffa, 0x5, 0x6, 0xe, 0x4, 0x2, 0xe38, 0x3, 0x80, 0xdb23, 0x1, 0x6456, 0x6000000, 0x8, 0xffff, 0x9, 0x0, 0x8d, 0x56, 0xb, 0x2, 0x4, 0x7ff, 0x8, 0x0, 0x9, 0x2f, 0x7, 0x1, 0x1, 0x3, 0x4, 0x4, 0x80, 0x4, 0x9, 0x3, 0xffffff5b, 0x5, 0x48f, 0x7, 0x0, 0xb753, 0xb7a6, 0xfff, 0x2, 0x9, 0x9, 0x6, 0x3, 0x4, 0x20, 0xe223, 0x80, 0x5, 0xfffffffe, 0x1, 0xfffffffb, 0x100, 0x3, 0x115d, 0xfffffff9, 0x5, 0x2, 0x5, 0x7, 0x6236a69d, 0x1, 0xffffffff, 0x0, 0x0, 0x1, 0x8c, 0x4, 0x8, 0xc, 0x77, 0x9, 0xf, 0x6, 0x1d7, 0x6, 0x9, 0xffffffff, 0x7, 0xf2, 0x5, 0x9, 0x3, 0x3, 0x9, 0x0, 0xc, 0x1, 0x3, 0x1, 0x2, 0x3, 0x1, 0xe0, 0x6, 0x9, 0x9, 0x7, 0x7fff, 0x80000001, 0xa429, 0x6, 0xf20, 0x7fffffff, 0x8, 0x2, 0x0, 0x100, 0x6, 0x7, 0x7, 0x6, 0x7, 0x6, 0x8, 0x8, 0x6, 0x7, 0x0, 0xc06, 0x9, 0xf0, 0x6, 0x7ff, 0xe00, 0x12a4, 0x0, 0x3, 0x8ae0, 0xffffffe7, 0x2, 0x4, 0x9, 0x0, 0x80, 0x10001, 0x7, 0x4, 0x8, 0x4, 0x5, 0x4, 0x4, 0x4, 0xf3, 0xfffffffe, 0x5, 0x0, 0xe22, 0x67, 0x7, 0x0, 0x6, 0x2, 0x1, 0x1, 0x9, 0x4, 0x4d, 0x0, 0x0, 0x55, 0x8000, 0xfd, 0xfffffff7, 0x9, 0x10001, 0x10000, 0x81e, 0xaaa0, 0x3, 0xc60, 0x88, 0x10a6, 0x8, 0xef9f, 0x7, 0x7fff, 0x5, 0x6, 0x8e8, 0x200, 0x0, 0x7ff, 0x0, 0x3, 0x100, 0x1, 0x2, 0x2, 0x0, 0x6, 0x0, 0x5cb6, 0x5, 0x0, 0x7e64, 0x0, 0x3, 0x5, 0x9, 0x254, 0xb86, 0x1ab2e81, 0x30ba, 0xb772, 0xd, 0x6, 0x5, 0x8000, 0x0, 0x0, 0x1, 0x2, 0x67db375a, 0x7fff, 0x80000001, 0x4, 0x9, 0x5, 0x8, 0x3, 0xb00e, 0xf0b, 0x833, 0x5b, 0x3, 0x40, 0x80000001, 0xb, 0x4, 0x2, 0x0, 0x9, 0xf, 0x6, 0x200, 0x1, 0x5, 0x6, 0x7, 0x1ff, 0x8, 0x18, 0xc90, 0x6, 0x0, 0x8, 0x9, 0x800, 0x3, 0x7, 0x1000, 0xc, 0x6, 0x7, 0xfff, 0x9, 0x7fff8000, 0x1, 0xff800000, 0xca, 0x6, 0x3, 0x2, 0x8, 0x5, 0x5, 0xfffffffe, 0x10001, 0x400, 0x3, 0xffffffae, 0x4, 0x3, 0x7, 0x2, 0x9, 0xfffffbff, 0x0, 0x0, 0x4, 0x4, 0x3, 0x5, 0x7, 0x0, 0x1, 0x7, 0x8, 0x7, 0x5, 0x5, 0x404, 0x8, 0x7, 0x9, 0x5, 0x4d1, 0x6, 0x80000000, 0x5, 0x9f, 0x4, 0xfffffff8, 0x7ff, 0x2, 0x40000000, 0xc3, 0xa293, 0x2, 0x9, 0xd, 0x8, 0x3, 0x1fed, 0x8, 0x1, 0x9, 0x3, 0x1, 0xb0, 0x5, 0x42d, 0xfffffff9, 0x4, 0x8001, 0x51, 0x80, 0x6, 0x6, 0x100, 0x0, 0x7, 0x93dd, 0x6, 0x13, 0x81, 0x8, 0x81, 0x2b, 0x0, 0x5, 0x2, 0x2, 0xc3c, 0x4, 0x2, 0x9, 0x4, 0x6, 0x2, 0x8, 0x2, 0x3b, 0x5, 0x0, 0x5, 0x6, 0xf, 0x37, 0xffff, 0xb9, 0xca12, 0x324bc677, 0x0, 0x9, 0xffff, 0xf5, 0x7ff, 0x40, 0x101, 0x0, 0x8, 0x400, 0xbd, 0x0, 0x5, 0x1, 0x3, 0x80, 0x800, 0x4, 0x7f, 0x1, 0x8, 0x7, 0x2, 0x0, 0x6, 0xfffffffa, 0x8, 0xff6, 0x8000000, 0x9, 0x6, 0x8, 0x6, 0x0, 0x4, 0x5, 0x4, 0x0, 0x138a, 0x0, 0x7f, 0x0, 0xfffffff8, 0x1, 0x0, 0x6, 0x2, 0x6, 0x8f, 0x5, 0x3a, 0x8, 0xc0, 0x6a3b, 0x2, 0xffffff86, 0x35, 0x2, 0x8, 0x4, 0xa, 0x2, 0x1, 0x7f000, 0x8, 0x449, 0x9, 0x200, 0x8, 0x86, 0x4, 0x800, 0x4, 0xffff, 0x8, 0x2, 0x5, 0x9, 0x200, 0x6, 0x67, 0xffffffff, 0xfff, 0x3, 0x8, 0x8000, 0x2, 0x12a, 0x8, 0x6, 0x8, 0x25, 0x5, 0x38, 0x5, 0x8, 0x4, 0x39, 0x9745, 0xa2a, 0x81, 0x7, 0x6, 0x4, 0x4, 0xfffffff7, 0x516f, 0x8, 0x1, 0x400, 0x3ff, 0x360, 0x2b0c2d27, 0x0, 0x2, 0x101, 0x12, 0x3, 0xdea, 0x3, 0x6a, 0x1ff, 0x2, 0x6, 0xfffffff8, 0x8001, 0x5, 0x401, 0x2, 0x2, 0x0, 0x1, 0x0, 0x200, 0x10, 0x9, 0x9, 0x3, 0x3, 0x1, 0x3, 0xd, 0x2e0, 0x401, 0x8000, 0x0, 0xae, 0x4, 0x4, 0x6, 0x9f58, 0x9, 0x8, 0x1, 0x2, 0x9, 0x8, 0x2, 0x9, 0x2, 0x20, 0x4, 0xf, 0x401, 0x1, 0x401, 0x3, 0x0, 0x3, 0xc, 0x800, 0x28000000, 0x3, 0x5af9, 0x0, 0xb6c, 0x8, 0xb907, 0x4, 0x7, 0xffff2d21, 0x485, 0x1000, 0x6, 0x4, 0x1, 0x81, 0x2, 0xbd1e, 0x6, 0x33, 0xd, 0x80, 0x8, 0xf9, 0x7fffffff, 0x10001, 0x11, 0x1, 0xe, 0x0, 0x4, 0x9, 0xffffffff, 0x7, 0x9, 0x5, 0x7f1f, 0x7, 0x7, 0x8, 0x3, 0x7, 0xc, 0x7, 0x3, 0x0, 0x2, 0x40, 0xd, 0x9, 0x9, 0x200, 0x40, 0x31cc, 0xffff56d2, 0x20000000, 0xfff, 0x9, 0x5, 0x5, 0xfffffff9, 0x0, 0xff, 0x100, 0x3, 0x6, 0x0, 0x8b, 0x200, 0x80, 0x2, 0xffff, 0x8001, 0xd8c7378, 0x1, 0x4, 0x0, 0x5, 0x3, 0x3, 0x1, 0xdc5e, 0x0, 0x4, 0x3b, 0xffff, 0x1, 0xffffffff, 0xffff, 0x1, 0x400, 0x0, 0x2, 0x5, 0x1000, 0x8000, 0xfffffeff, 0x620a, 0x5, 0x2, 0x0, 0x8, 0x4, 0xdc, 0x2, 0xe, 0x7, 0x140000, 0xfffffff7, 0x1ff, 0x0, 0xb, 0xfd, 0xdd18, 0x0, 0x1, 0x40, 0x5, 0x7c43, 0x4, 0x2c, 0xffff, 0x8, 0x6, 0x200, 0x9, 0xffff, 0x9f, 0x6, 0x3, 0x100, 0x2, 0x9, 0x2, 0x9, 0x1, 0x100, 0x7, 0x5, 0xe, 0x24, 0x8001, 0x6, 0x8000, 0x3, 0xf2, 0x2, 0x1, 0x10001, 0xdeca, 0x4, 0xea, 0x6, 0x3, 0x8, 0x7ff, 0x9, 0x0, 0x8, 0x5b, 0x9, 0x4, 0xff, 0xbf02, 0x2e90a212, 0x40000c, 0x8, 0x20000000, 0x6, 0xffff, 0xfffff801, 0x2], 0x2, 0x400, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000b00)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x16b8c5b5213a03b5}) executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x2, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000fcffffff0200000005000000030000000a01766c616e30000000000000000000000076657468305f746f5f626f6e6400000064766d7270300000000000000000000064766d727030000000000000000000000000000000000000ffff00000180c200000100ffffffffff000070000000aa000000d80000006d61726b000000000000000000000000000000000000000000000000000000001000000000000000e0ffffff00000000efffffff00000000434c41535349465900000000000000000000000000000000000000000000000008000000000000000f0000000000000003000000000000000a016d6163766c616e30000000000000000070696d3672656700000000000000000073797a6b616c6c65723000000000000064756d6d7930000000000000000000000180c20000000c00000000ffffffffffffffffff0000ff0000007000000070000000b80000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a310000000000000000000000000402000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000feffffff00000000"]}, 0x298) program did not crash bisect: testing without sub-chunk 3/3 testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 24, 2, 2, 19, 1, 24, 30, 5, 10, 2, 28, 5, 6, 4] detailed listing: executing program 0: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) unshare(0x22020600) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, &(0x7f00000025c0)=""/102398, &(0x7f000001b5c0)=0x18ffe) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0xffbffff7, 0xffffffff, 0x1}, 0x10) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000fd3f0000000000000900000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f0000000400), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000440)={0x20000014}) epoll_wait(r4, &(0x7f0000000480)=[{}], 0x1, 0x400) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/4100, 0x1004) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x4000040) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000ac0)={0x8cb, "761f41c1eff2835da5f44a67f54aeb425a8636c5ff3769bc70e6769f848f30df00f4775848257f32ace0aab77ac284df1f6a8ebfeed7d6f59916e7a3fb81cb1e8e52815b505fb9006afea6183466f01036c2663302a576f007980274fe17b899df2c946034fb815244f6b0b48321ec0c9b1b686b21d2c5448ae08057e60297761d4d11084f499b5d8014c77d7ca51ac0dee03f7e15da38323401e68b2e014502a09184142db66d4a4558d58886532e48222e7bb9cb4a028441553080041187e21df9552933ca8baf1e4c01be086ef35c7bd6230c4afe9f625bd78f052ac1cb3785e43409dd4ddd17f59cd5c39c6779ef9939156a0283714f514517df6a3cc79113c75bb7c783bfe0cb6c9e3f554acb2d58ec012452494b98f8f9e8cc178279b089eb91db93b7261367ddf201664278e80eebc1a9124cb5fa1b0d0b734e84b4fa1d4e83df588ed81ded2c697f7b0d7bf3e7fd6ea778ca1efd28dbf6feb532fe8dd5edb12bde258bb71692e895a05ee39f76fa764173c1944616e32c0cedede3b1c0c8df0d22178060a776f85c170d705018a13d79413cd82e238f1d3672d1c1682341a9d77d1799956dac97cac6c7eb47c5fe4002ddda1abf0b05cd21a0c3c63d4ae836e35d308baeedecef4be91d54ee576340112ecf28a5599e69a2d7f39fd3bc92903b99533376b4f65043659a3ef2abfff96bba69dd72e8e4465f6d2478f33d5543b8b43fafe30f4eeff97b3a30b5ef23a6f821fa4345aa953e0430cc65bc9cde2a26f558a2b7285d49d374f34be2f279a34d8c41a0d0084c28a64721d5f6c9e1038dc561c4f66c636e96578e8f37addf5eb611efcc05d5d9bd7e1e31b4f11229bf5e9afb27c3f27343eb48a07458130bb2b06247e2fb9d8c326d24d03de494ed53bf67f3f34127c09ba7ce72cd031b4e87cde5f80d1a778e19f4dde22cffa399fd8dd8fa3d432ccaa7529d63e1f82a8975ac7df407a12e6f2196e27e60ca745a5e75fe5e2c5fb6bcba51438dd06258b25457b52274168f6e44d64d8093723b696b905aca2ca8b9211ce648f1b47eb4fb11a616d28567789a827f44ab9ddf833013272228b422cbbd6ccdb39c6c9a21b80f0e02b7c3f03840cff30b021c4dae454dd9c2ada96191ab5346722429e192c0eb752595bbfe8eb76274953f2bd1c72782819a6958966cde10c40dc1106f2fde4b061137b0153b8443d9d21f1fa2fe0996263ad0d09872731913c8ea5f0cde134e11a7e59320bdda405a6ec251fd44a4e74668895b4ad9908e99af9db94ccf5697650b1cee0e4e3333ea2c826cea519f2de05bbe16fb47e10d940259d614fc12417657f6f7661e23c85c859bf0b7e5dbb553d108ab1d341705c1f5c61ed7c5eb9cd23693a54342e3c8a73e273e902a37c0766e36831b8c87ca5be3bed1ab1378e2accd32f84f38d7578fb7095ad8bf5dd38fbdaf68f214106548462ff363ddc432f0013ce7c02899df0d907ad9b682579c6c3f8e65b1dd288cb81060f174b0ef567ca8ea530300fb4e2a3a12f8e57322fb84c8580b6ff4dffac80fd332d7d0c1933dea78dc417ab33e7ee885b44ec473960046c11ac0642b7dbe1303d40fc6a401b7207d157a2eb0774ae02ea6fceb093a436a499cbb7d07aeb44eb9a44377e8f27387095964970136d6ba8593822ed3e35cc6cf125a72bdca8b79bbb919cab0553fcf28c3ecd5045f2cc6b64be93dbb70db717fbae9d9610e11fcf9f404c2978c189bb40449aa6784299133abb3c418aa03c52ad4cc04de8b97190c2b5adeb104a56f7c51faaaa57ca83e0fbd74451106baa70b752419df2af4f29902846235095183c451966235a748c7a7fa67bd3c39304e2e9b9e7ce3ea229a60dc3269d7ae528fb4a4f42021feda39a3d22cdd1c7fb146d5930c241de2961cef90ace185c812564ebf840a775e3f73acb3b507e4e8b6659f9ba8fee780f21a551fd607d48299b709b25201341e88c130508354137ec365cadfa72681f7ea6e090f38bcd67f5fd925482b73e07b43f4798a6c6afa698ddde0a0c543a7c64397cbf4c36179d9f59377e54edfb5979daa985eb82360d68f10a0c0355fee18281626c329fd8bcd18c0059f78c419bc7dd34df738a8aadef5a1f7feddd9390034c74a807b095c7eb51fb43823ff38c9b71a85f77df90c916063867798dbb83a7e011423ba8686875eb19e719448e23caf90e350e7601788db592fe286ae68f69c0fe67ec0535a0e70c3f371de82458a2949d9f10669294e1d8812d0317ceb7ce2980b4fe6a5bfc94de43e24cbe47cad99a076c7500ab51485c1bf41d3946fc0a56f660f907939d4e9f24d5fc442def5116cf40ba22da340c1271dbb8f7a8eed2fe8b2a40172ab8f27aeb8cddfa375ac31fc66ee835ab85b48b8e4953d0a6ea88a1726515b2dfe375405ba221b798125afc94c1ab936f87a1fb6ad38497a5c74aaa07fa8245d2418f70d251beee6d739f856bd22ae3337cf38625dc11c7f72ce0a3678916f209b1d66fefa5b95df0f0fbab95acdae4eedb84585320eaae1c9c34273d49fc12d4f4c618927724c9d3ae400344cfd6176f761f9dd6c884af556f339a984e7137fec2f24905e788ded329288d0ba9a43d9fd5dd49a98c076bd0ddca4357433d0b86ecfbd99d90c7ad6f893baf1567f94f7ac7a70585a633eab0e709f32a2fb2a851406974a1355a4093bb8874c69cecdccb36a23178eecdba72c0090724826747adcf6cf76cc11dcb1796826d3badf811df25cd6fc41c5f2fd850cc9218c13d00823cab29678689fb469ad1c37cadc583f15b49df3a1622102f9744004e822218db891322968003a7e98e535daf002fc38dbe87dc1eccd4270ddc1a70166f5de85b297a85daa8934fdfab6c284c1e4fc698a28fb479fc09f3ca653a786ae1d2e2727e24cbd6a81ee6078666ddbd18cc22203df5c02495cd13bb563fa26f876faed440f22ff7ce44d64b2d3c787a0bd90bd5de2d11b8e3c52c6ed6759d25035a39f57b37d88d2bbc0ae86c4f7292df22ddc4acf33441172e832117694cf1510061a7f0a2b0fc9eeab20e7bd0083838a5c410ef060c72d99040c00d8c76eca2a2127db232e17896d6e2032554a69634f909ec8fa7ee246fd8dc72e5b003122a08541e73f4114210da96eaa1fad40e9dd1e851ca88c71d84cfd0f740f"}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000240)=0x1002, 0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000002000000d00000000000f00183400000a180500000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000440)={0x0, 0xf, 0x1, "ed"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000001080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x8, 0x24200) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, &(0x7f00000002c0)={0x20, 0x22, 0xeb, {0xeb, 0x21, "5669c367224f441d849f1dc874d6981fdf93c15d2c92ff32d5cc10f4adc572432a2d87ff04cd40d57621525e8808ff4f47dbb374b19616cd22b818503783d70c0071e0083309d691c82459445b4ae80b0da4c02db4abd9286c524ddbca6d6902f01a44fc02971bf57631066ba294f2ad304afc6dcfe7a3395235ee52a3c0cc447f29cad6e5a06e94719807cf01db62e0157bd977d8eeef95e90c88be3c9a09df823b40245d4e6de5c154d31a6482c244bfc244ab8237efebb27ea38d697ba9c9a671622286d7a1acf3abd4b25aa989f8e5bb8308ea55ad48a68637d7a10773f11c45668ebbfd6972ad"}}, &(0x7f0000000480)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "66fb9b8b4c0742e9f2ccf197843e5b0e385a48bc30bc65f886595bf3aaba89f860ffe0745abb36f20358517ecde72926e5aa1f38bef760a2612a0378360eaff5e797b44ed498a79d088dce469569bb006830f5bb8b11c1907f3ec1afc0e678cf4b39d8efac4c45e0579d49ff14935807bc9ceb43cd0e352ef681cd1a7b45c9e0fcb7f813b730e622688c1fcf1c7da0403a52cd4aed74b53b2abf76f17847224be73a69cbf2e89c78462133be6a9909b9d88a7dafbe96b3aa8cb5117624fef455bcce97f9d22446a214a63e044bbd0af4964e60bc6782"}}}, &(0x7f0000000740)={0x2c, &(0x7f00000005c0)={0x0, 0x30, 0x26, "bb36fefcf5796d5c2c0b06284bfc87f7cde617e7e236fc6b3d6166c8ee7c1237690c9ce40a8d"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000006c0)={0xc0, 0x5, 0x6, "2ea444361736"}, &(0x7f0000000700)={0x40, 0x5, 0x5, "5e75c73377"}}) syz_usb_control_io$printer(r0, 0x0, 0x0) executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000ff8000000000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000030000000000000400000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) executing program 2: symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00') (async) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0xe00008da) (async, rerun: 32) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./bus\x00') (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x40) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480), 0x140, 0x0) r3 = dup(r2) read(r3, &(0x7f00000004c0)=""/189, 0xbd) fadvise64(r3, 0x3, 0x4000000005, 0x4) (async, rerun: 32) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)=0x20000) (async, rerun: 32) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000280)={0x101, 0x3, 0xfd}) (async) ioctl$MEMREAD(r1, 0xc0404d1a, &(0x7f0000000440)={0x8, 0x63, 0xd7, &(0x7f00000002c0)=""/99, &(0x7f0000000340)=""/215, 0x1, '\x00', {0xc3, 0x886, 0x55}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x42) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x3) executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) executing program 2: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) unshare(0x22020600) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, &(0x7f00000025c0)=""/102398, &(0x7f000001b5c0)=0x18ffe) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0xffbffff7, 0xffffffff, 0x1}, 0x10) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000fd3f0000000000000900000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000003c0), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000400), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000440)={0x20000014}) epoll_wait(r2, &(0x7f0000000480)=[{}], 0x1, 0x400) ppoll(&(0x7f00000004c0)=[{r2, 0x401}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$kcm(0x10, 0x2, 0x4) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/4100, 0x1004) executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) keyctl$dh_compute(0x17, &(0x7f0000000980), 0x0, 0x0, &(0x7f00000009c0)={0x0}) r3 = syz_open_dev$sndctrl(&(0x7f0000000a00), 0x84, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0485510, &(0x7f0000000a40)={0x0, 0x1, 0x1, 0x0, &(0x7f0000000ac0)=[{}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000b40)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0x1, 0x0, 0x2, 0x4, 0x0, 0x7, 0x8004, 0xa, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000b80)='X', 0x34000, 0x0, &(0x7f0000000bc0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000c00)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000cc0)={{0x0, 0xeeee0000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x5, 0x9, 0x10}, {0xffff1000, 0x200000, 0xd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x7}, {0x2000, 0x5000, 0xc, 0xff, 0x4, 0x4, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6, 0xfc}, {0x6000, 0xfffef001, 0x9, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x83}, {0xdddd0000, 0xb000, 0x0, 0x35, 0x3, 0x0, 0x42, 0x0, 0x0, 0x0, 0x3}, {0xeeef0000, 0xe6e31000, 0x8, 0xfe, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x30000, 0x2000, 0xf, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26, 0x0, 0x0, 0x1}, {0x80a0000, 0x807}, {0x7000}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0xfffffffffffffffc, 0x0, 0x0, [0x0, 0xe4, 0x1, 0x40]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000740), 0x8, 0x10, &(0x7f0000000780), 0x3f}, 0x16) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r5) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000e40)={'syzkaller0\x00', 0x1}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=@newtfilter={0x74, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1, 0xf}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xf, 0x800, 0x5, 0xf738, {0xb, 0x2, 0x0, 0x2, 0x200, 0x1}, {0x2, 0x1, 0x1, 0x0, 0xffff}, 0xd8, 0xeb}}]}]}}]}, 0x74}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000840)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x8004) executing program 4: unshare(0x6020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000002c0)={0x3, 0x0, 0xfffff3a2}) executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80001001300100000000000fbdbdf25fc000000000000000000000000000000fc000000000000000000000000000001000000044e2400000a0060203b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0xfffffffffffffdee, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x40000001}, 0x24004000) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000ffffff8000000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc01000000000000000080ff00000000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) (async) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001740)={{r0}, r1, 0x18, @inherit={0x98, &(0x7f00000003c0)={0x1, 0xa, 0xef, 0x3, {0x0, 0x7, 0x1, 0x8000000000000000, 0x6}, [0x48c9, 0x4, 0xc010, 0xfffffffffffffffc, 0x1000, 0x5c8d, 0x9, 0x8001, 0x1, 0xff]}}, @subvolid=0x2}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001740)={{r0}, r1, 0x18, @inherit={0x98, &(0x7f00000003c0)={0x1, 0xa, 0xef, 0x3, {0x0, 0x7, 0x1, 0x8000000000000000, 0x6}, [0x48c9, 0x4, 0xc010, 0xfffffffffffffffc, 0x1000, 0x5c8d, 0x9, 0x8001, 0x1, 0xff]}}, @subvolid=0x2}) poll(0x0, 0x0, 0x2) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) (async) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044402, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000001c0)={0x0, 0x0, 0x10001, 0x5}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000000700)={0xc, {"a2e3ad2107c752f91b25470987f70e06d038e7ff7fc6e5539b3264078b089b3b083468060890e0878f0e1ac6e70a9b3365959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31350d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7dafbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85800056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dab54c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10746fc4090ac97b77e4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f5f71d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc07d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810930500ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab974c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc660db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d154d8a5ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21e5ec68cb068ea88067d905ea917bb03eefdaebdeabf2c0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x104a) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0002003c0001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010400028005000100010000003c000380"], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000003f0026012bbd700000000000117c00000400fc800c00018055fd0400", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000140007000001000000000000000000000000000100009d00", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) executing program 0: syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8a16, 0x3a10, 0x3, 0x31d}, &(0x7f0000000500), &(0x7f0000000580), &(0x7f0000000180)) syz_clone(0x100111, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) r0 = eventfd(0x0) io_submit(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xc2, r0, &(0x7f0000000140)="0100fd6400000000", 0x8, 0x36, 0x0, 0x0, r0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001701000001e500000000d8936e75a545998a2db3c561ef65a300000000000018000000000000001701000004000000fffbffff00000000"], 0x30, 0x40}], 0x1, 0x40800) program did not crash bisect: split chunks (needed=true): <15>, <14> bisect: split chunk #0 of len 15 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=35s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 10, 2, 28, 5, 6, 4, 5, 30, 30, 9, 4, 14, 2, 1, 2, 23, 4, 5, 28, 2] detailed listing: executing program 4: unshare(0x6020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000002c0)={0x3, 0x0, 0xfffff3a2}) executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80001001300100000000000fbdbdf25fc000000000000000000000000000000fc000000000000000000000000000001000000044e2400000a0060203b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0xfffffffffffffdee, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x40000001}, 0x24004000) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000ffffff8000000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc01000000000000000080ff00000000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) (async) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001740)={{r0}, r1, 0x18, @inherit={0x98, &(0x7f00000003c0)={0x1, 0xa, 0xef, 0x3, {0x0, 0x7, 0x1, 0x8000000000000000, 0x6}, [0x48c9, 0x4, 0xc010, 0xfffffffffffffffc, 0x1000, 0x5c8d, 0x9, 0x8001, 0x1, 0xff]}}, @subvolid=0x2}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001740)={{r0}, r1, 0x18, @inherit={0x98, &(0x7f00000003c0)={0x1, 0xa, 0xef, 0x3, {0x0, 0x7, 0x1, 0x8000000000000000, 0x6}, [0x48c9, 0x4, 0xc010, 0xfffffffffffffffc, 0x1000, 0x5c8d, 0x9, 0x8001, 0x1, 0xff]}}, @subvolid=0x2}) poll(0x0, 0x0, 0x2) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) (async) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044402, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000001c0)={0x0, 0x0, 0x10001, 0x5}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000000700)={0xc, {"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", 0x1000}}, 0x104a) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0002003c0001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010400028005000100010000003c000380"], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000003f0026012bbd700000000000117c00000400fc800c00018055fd0400", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000140007000001000000000000000000000000000100009d00", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) executing program 0: syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8a16, 0x3a10, 0x3, 0x31d}, &(0x7f0000000500), &(0x7f0000000580), &(0x7f0000000180)) syz_clone(0x100111, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) r0 = eventfd(0x0) io_submit(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xc2, r0, &(0x7f0000000140)="0100fd6400000000", 0x8, 0x36, 0x0, 0x0, r0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001701000001e500000000d8936e75a545998a2db3c561ef65a300000000000018000000000000001701000004000000fffbffff00000000"], 0x30, 0x40}], 0x1, 0x40800) executing program 6: unshare(0x6020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000002c0)={0x3, 0x0, 0xfffff3a2}) executing program 6: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) read(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r9, 0x80000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000cc0)) lseek(r0, 0x0, 0x3) r10 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) r11 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x10, 0x81, 0x80, 0x4}, {0x9, 0x5, 0xe, 0x2, 0x10, 0xd, 0xa, 0x9}, {0x9, 0x5, 0x9, 0x3, 0x20, 0x0, 0x0, 0xfd}}}}}}]}}, 0x0) syz_usb_ep_write(r11, 0x7, 0x9, &(0x7f0000000300)="39151cdff086a4bbcb") executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r2, @ANYBLOB="5c005a80140001800500070001000000050006000100000044000380120001000c"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000000c0)="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") r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0x3}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffe0f, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r8 = socket$inet6(0xa, 0x2, 0x0) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f0000008880), 0x45b, 0x2, 0x0) unshare(0x62020400) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r9, 0x0, 0x5, &(0x7f0000000240)={@loopback, @multicast2, 0xfffb, "66c5aff8a7eb17f1f6cec2e7780795478c84aea31700", 0x96bf, 0x2, 0x7a, 0x6b}, 0x3c) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000000), 0x4) socket(0x10, 0x3, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4001010) executing program 2: madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r0, &(0x7f0000000740)='0', 0x1) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\t/'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000780)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000020a09040000000000000000020000000900010073797a3000000000090001e173797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0x74}, 0x1, 0xf5ffffff}, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x80000000000000a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) epoll_create(0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309180008000a00", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800070008000000062102000100000008000500", @ANYRES16=r0], 0x54}, 0x1, 0x0, 0x5000000, 0x24004845}, 0x8000002) executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000ffffff800000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) executing program 5: r0 = syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000500)=ANY=[@ANYBLOB="120110030000004035120182400001020301090286080000003009080b00010107208c0904000000010120000924010040041d000708240a0001ff23030c240302"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="004e82a3adfc8c4409e6f5030400000004034308"], 0x0, 0x0, 0x0}, 0x0) executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'team0\x00', 0x1}, 0x18) close(0x3) r1 = syz_open_dev$sndpcmc(&(0x7f0000000540), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f00000009c0)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000c40)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1c79, &(0x7f0000000d00)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000e40)=0x7) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000070e624618780e663a6ad3f996f37381f72000034ffac913a50583a1a32002695b61efd1b936f36509da3d0b16308fda277e185fc2621ada4e2c7c0ea3590074f764e2edfcc0a89053afde9c9569cef6d0c8a2d21f7a00aad04c51daffce9b81ec0c6d0e7320a99f8588c9a043d73eb0e8e256afa2eada13f068a74c6080b6367b250260100010014fcd19c931e8ff5c21521b1d2dd6c099f45599ce9ef3e9a97d32bfc197e1a82ed773c79c0e7222a0aaed827b1a458b4a6f1b00db798b630b30a0d68a7ab22d2c2fdff79b571a3d3c40274032d59e7ff76bb54b70232c7c80f162556e9d05fdc3d12b6a453e0ea802972966ab2c7d59d7b6e4c127a5ccd88211b30b90f31dd", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000020000008520000004000000184a00000200000000000000000000007c94000010000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r6, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x80}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2f}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x4}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x4880) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000180)) executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001701000001e500000000d8936e75a545998a2db3c561ef65a300000000000018000000000000001701000004000000fffbffff00000000"], 0x30, 0x40}], 0x1, 0x40800) executing program 6: unshare(0x6020400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000200)={0x4004, r0, 0x2}) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, 0x0) executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x12, 0x0, {0xc, 0xd}, {0xc, 0x5}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048810}, 0x2000000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f00000005c0)={0xdf, 0x0, 0x80000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x4, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001b80)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0x270, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) mprotect(&(0x7f0000e15000/0x2000)=nil, 0x2000, 0x2) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000001f80)={'ip6_vti0\x00', &(0x7f0000001fc0)=@ethtool_cmd={0x41, 0x5, 0x3, 0x0, 0x7, 0x0, 0x0, 0xfc, 0x0, 0xfc, 0x0, 0xfffffff9, 0x0, 0xff, 0x0, 0x45, [0x0, 0x6]}}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f0000019100400014000200100011"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000100)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000240)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x1, 0x5f6, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x24}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_open_dev$media(&(0x7f00000003c0), 0x6be, 0xc8683) ioctl$MEDIA_IOC_REQUEST_ALLOC(r10, 0x80047c05, &(0x7f0000000480)) r11 = dup(r9) syz_ublk_setup_queues(r11, r8, &(0x7f0000000340)={0x0, 0x20fb87, 0x1, 0xfffffffd, 0x32c}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xba5e, 0x8000, 0x1006, 0x160, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6605, 0x200, 0x10000000, 0x546}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88db, 0x10000, 0x3, 0xfffffffc, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000000, 0x8000, 0x2, 0xbd, 0x0, r3}}], 0x1, &(0x7f0000000540)={0x2e, 0x54, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r7, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) ioctl$MEMREADOOB(r11, 0xc0104d04, &(0x7f0000000500)={0x6, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_modify_offsets$flags(r4, r12, 0x38, 0xfffffffa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x14) syz_usb_connect(0x3, 0x96d, &(0x7f0000000a80)=ANY=[@ANYBLOB="12010102e21b5140b1134200e8a90102030109025b09040d9720090904320409f073ea09090503002000f80040090504104000"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r11, 0x7b2, &(0x7f0000001b40)={&(0x7f0000000b40)=[0x5, 0xaa4, 0xdb, 0x7, 0xd, 0x800, 0x401, 0xf, 0x4, 0x6, 0x800, 0x40, 0x6, 0x4, 0xfffffffe, 0x40d, 0xff, 0x1, 0xc6, 0x100, 0x6, 0x3, 0x80000001, 0xbfb, 0x2, 0x6, 0x8, 0x6, 0x5, 0x64fe2241, 0x6, 0x5, 0x8, 0x8, 0x8b, 0x2, 0x69, 0x3, 0x6, 0xadb433a, 0x10000, 0xffff96d0, 0x0, 0x0, 0x0, 0x2, 0x1000, 0x401, 0x5, 0x0, 0x8001, 0x400, 0x2, 0x5, 0x80, 0x400, 0x5, 0x9, 0x80000001, 0x10001, 0x9, 0x4, 0x8000, 0x7, 0x1, 0x7, 0xffff8000, 0xfffffff7, 0x5, 0x6, 0x0, 0x1, 0xfffffffc, 0x7, 0x7ff, 0x8000, 0x4, 0x2, 0x6, 0x0, 0x2, 0x2, 0x86b, 0x3, 0x5, 0x65c8049d, 0x8, 0x8, 0x6, 0x2, 0xe1, 0x9, 0x6, 0x4, 0x0, 0x3, 0x5, 0x101, 0x9, 0x3, 0x0, 0x0, 0x2, 0x3, 0x3, 0x80000001, 0x5664, 0x80, 0x75, 0x3, 0x8, 0xee, 0x8000, 0x1, 0x10000, 0x7f, 0xa4c, 0x5, 0x80, 0xb, 0x8, 0xb, 0xd, 0xfffffffe, 0x9, 0x1432, 0x0, 0x0, 0x6, 0x1, 0xdb71, 0xffff, 0x4, 0x101, 0x3, 0xc3b9, 0x1, 0x2, 0xb1e4, 0x9, 0x3, 0xe, 0x80000001, 0x8, 0x401, 0x1, 0x7, 0x2, 0x385, 0xde, 0xab84, 0xde, 0x8001, 0x7, 0x7, 0x8000, 0x9, 0x2, 0x2, 0x9, 0x2, 0x5, 0x9, 0x0, 0x6, 0x2, 0x5, 0x81, 0x1000, 0x7, 0x4, 0x40, 0x2, 0x8, 0x10000, 0x9, 0xfffffffe, 0x2, 0xfffffffb, 0x5, 0x1, 0x1, 0x10, 0x2549, 0x5, 0x200, 0x0, 0xeb2, 0x3, 0x2, 0x2, 0xc, 0x6, 0x3ff, 0xffffe3dc, 0x2, 0x9, 0x8, 0xffffdd5e, 0x80, 0xfff, 0x2, 0x1, 0x0, 0x200, 0xe48d, 0xfffff8ee, 0xb1, 0x81, 0xeb, 0x3, 0x0, 0x1, 0x80000001, 0x5, 0x1ff, 0x7, 0x7, 0x5, 0x2, 0x6a38bf39, 0x6, 0x7ff, 0x1bb800, 0x7, 0x5, 0x4, 0x3ff, 0x81, 0x8000, 0x7f, 0x66, 0xffffffff, 0x80, 0x9, 0x0, 0x226a, 0x8, 0x4, 0x790, 0x0, 0xffff8001, 0x8f, 0xbbf, 0x5, 0xffff, 0x9, 0xb83, 0x5, 0x0, 0x6, 0x4, 0x3b, 0x2, 0x8001, 0x8, 0xb9e, 0x6, 0x3, 0x0, 0x9, 0x6, 0x3, 0xfffffff9, 0x7ff, 0x100, 0x0, 0x81, 0x3ff, 0x8, 0x400, 0x9, 0x4, 0x7, 0x8, 0x6, 0x11, 0x1, 0xfffffffd, 0x5, 0xe7cb, 0x3, 0x5, 0xc, 0xff, 0x400, 0x4, 0xb30, 0xe4, 0x7fffffff, 0x9, 0x7, 0xa, 0x1afa, 0x2, 0x6, 0x2, 0x6, 0x1, 0x5, 0x9, 0x2, 0x8001, 0xe, 0x1, 0xfffffffe, 0x2, 0x0, 0x7, 0x66, 0xfffffffa, 0x5, 0x6, 0xe, 0x4, 0x2, 0xe38, 0x3, 0x80, 0xdb23, 0x1, 0x6456, 0x6000000, 0x8, 0xffff, 0x9, 0x0, 0x8d, 0x56, 0xb, 0x2, 0x4, 0x7ff, 0x8, 0x0, 0x9, 0x2f, 0x7, 0x1, 0x1, 0x3, 0x4, 0x4, 0x80, 0x4, 0x9, 0x3, 0xffffff5b, 0x5, 0x48f, 0x7, 0x0, 0xb753, 0xb7a6, 0xfff, 0x2, 0x9, 0x9, 0x6, 0x3, 0x4, 0x20, 0xe223, 0x80, 0x5, 0xfffffffe, 0x1, 0xfffffffb, 0x100, 0x3, 0x115d, 0xfffffff9, 0x5, 0x2, 0x5, 0x7, 0x6236a69d, 0x1, 0xffffffff, 0x0, 0x0, 0x1, 0x8c, 0x4, 0x8, 0xc, 0x77, 0x9, 0xf, 0x6, 0x1d7, 0x6, 0x9, 0xffffffff, 0x7, 0xf2, 0x5, 0x9, 0x3, 0x3, 0x9, 0x0, 0xc, 0x1, 0x3, 0x1, 0x2, 0x3, 0x1, 0xe0, 0x6, 0x9, 0x9, 0x7, 0x7fff, 0x80000001, 0xa429, 0x6, 0xf20, 0x7fffffff, 0x8, 0x2, 0x0, 0x100, 0x6, 0x7, 0x7, 0x6, 0x7, 0x6, 0x8, 0x8, 0x6, 0x7, 0x0, 0xc06, 0x9, 0xf0, 0x6, 0x7ff, 0xe00, 0x12a4, 0x0, 0x3, 0x8ae0, 0xffffffe7, 0x2, 0x4, 0x9, 0x0, 0x80, 0x10001, 0x7, 0x4, 0x8, 0x4, 0x5, 0x4, 0x4, 0x4, 0xf3, 0xfffffffe, 0x5, 0x0, 0xe22, 0x67, 0x7, 0x0, 0x6, 0x2, 0x1, 0x1, 0x9, 0x4, 0x4d, 0x0, 0x0, 0x55, 0x8000, 0xfd, 0xfffffff7, 0x9, 0x10001, 0x10000, 0x81e, 0xaaa0, 0x3, 0xc60, 0x88, 0x10a6, 0x8, 0xef9f, 0x7, 0x7fff, 0x5, 0x6, 0x8e8, 0x200, 0x0, 0x7ff, 0x0, 0x3, 0x100, 0x1, 0x2, 0x2, 0x0, 0x6, 0x0, 0x5cb6, 0x5, 0x0, 0x7e64, 0x0, 0x3, 0x5, 0x9, 0x254, 0xb86, 0x1ab2e81, 0x30ba, 0xb772, 0xd, 0x6, 0x5, 0x8000, 0x0, 0x0, 0x1, 0x2, 0x67db375a, 0x7fff, 0x80000001, 0x4, 0x9, 0x5, 0x8, 0x3, 0xb00e, 0xf0b, 0x833, 0x5b, 0x3, 0x40, 0x80000001, 0xb, 0x4, 0x2, 0x0, 0x9, 0xf, 0x6, 0x200, 0x1, 0x5, 0x6, 0x7, 0x1ff, 0x8, 0x18, 0xc90, 0x6, 0x0, 0x8, 0x9, 0x800, 0x3, 0x7, 0x1000, 0xc, 0x6, 0x7, 0xfff, 0x9, 0x7fff8000, 0x1, 0xff800000, 0xca, 0x6, 0x3, 0x2, 0x8, 0x5, 0x5, 0xfffffffe, 0x10001, 0x400, 0x3, 0xffffffae, 0x4, 0x3, 0x7, 0x2, 0x9, 0xfffffbff, 0x0, 0x0, 0x4, 0x4, 0x3, 0x5, 0x7, 0x0, 0x1, 0x7, 0x8, 0x7, 0x5, 0x5, 0x404, 0x8, 0x7, 0x9, 0x5, 0x4d1, 0x6, 0x80000000, 0x5, 0x9f, 0x4, 0xfffffff8, 0x7ff, 0x2, 0x40000000, 0xc3, 0xa293, 0x2, 0x9, 0xd, 0x8, 0x3, 0x1fed, 0x8, 0x1, 0x9, 0x3, 0x1, 0xb0, 0x5, 0x42d, 0xfffffff9, 0x4, 0x8001, 0x51, 0x80, 0x6, 0x6, 0x100, 0x0, 0x7, 0x93dd, 0x6, 0x13, 0x81, 0x8, 0x81, 0x2b, 0x0, 0x5, 0x2, 0x2, 0xc3c, 0x4, 0x2, 0x9, 0x4, 0x6, 0x2, 0x8, 0x2, 0x3b, 0x5, 0x0, 0x5, 0x6, 0xf, 0x37, 0xffff, 0xb9, 0xca12, 0x324bc677, 0x0, 0x9, 0xffff, 0xf5, 0x7ff, 0x40, 0x101, 0x0, 0x8, 0x400, 0xbd, 0x0, 0x5, 0x1, 0x3, 0x80, 0x800, 0x4, 0x7f, 0x1, 0x8, 0x7, 0x2, 0x0, 0x6, 0xfffffffa, 0x8, 0xff6, 0x8000000, 0x9, 0x6, 0x8, 0x6, 0x0, 0x4, 0x5, 0x4, 0x0, 0x138a, 0x0, 0x7f, 0x0, 0xfffffff8, 0x1, 0x0, 0x6, 0x2, 0x6, 0x8f, 0x5, 0x3a, 0x8, 0xc0, 0x6a3b, 0x2, 0xffffff86, 0x35, 0x2, 0x8, 0x4, 0xa, 0x2, 0x1, 0x7f000, 0x8, 0x449, 0x9, 0x200, 0x8, 0x86, 0x4, 0x800, 0x4, 0xffff, 0x8, 0x2, 0x5, 0x9, 0x200, 0x6, 0x67, 0xffffffff, 0xfff, 0x3, 0x8, 0x8000, 0x2, 0x12a, 0x8, 0x6, 0x8, 0x25, 0x5, 0x38, 0x5, 0x8, 0x4, 0x39, 0x9745, 0xa2a, 0x81, 0x7, 0x6, 0x4, 0x4, 0xfffffff7, 0x516f, 0x8, 0x1, 0x400, 0x3ff, 0x360, 0x2b0c2d27, 0x0, 0x2, 0x101, 0x12, 0x3, 0xdea, 0x3, 0x6a, 0x1ff, 0x2, 0x6, 0xfffffff8, 0x8001, 0x5, 0x401, 0x2, 0x2, 0x0, 0x1, 0x0, 0x200, 0x10, 0x9, 0x9, 0x3, 0x3, 0x1, 0x3, 0xd, 0x2e0, 0x401, 0x8000, 0x0, 0xae, 0x4, 0x4, 0x6, 0x9f58, 0x9, 0x8, 0x1, 0x2, 0x9, 0x8, 0x2, 0x9, 0x2, 0x20, 0x4, 0xf, 0x401, 0x1, 0x401, 0x3, 0x0, 0x3, 0xc, 0x800, 0x28000000, 0x3, 0x5af9, 0x0, 0xb6c, 0x8, 0xb907, 0x4, 0x7, 0xffff2d21, 0x485, 0x1000, 0x6, 0x4, 0x1, 0x81, 0x2, 0xbd1e, 0x6, 0x33, 0xd, 0x80, 0x8, 0xf9, 0x7fffffff, 0x10001, 0x11, 0x1, 0xe, 0x0, 0x4, 0x9, 0xffffffff, 0x7, 0x9, 0x5, 0x7f1f, 0x7, 0x7, 0x8, 0x3, 0x7, 0xc, 0x7, 0x3, 0x0, 0x2, 0x40, 0xd, 0x9, 0x9, 0x200, 0x40, 0x31cc, 0xffff56d2, 0x20000000, 0xfff, 0x9, 0x5, 0x5, 0xfffffff9, 0x0, 0xff, 0x100, 0x3, 0x6, 0x0, 0x8b, 0x200, 0x80, 0x2, 0xffff, 0x8001, 0xd8c7378, 0x1, 0x4, 0x0, 0x5, 0x3, 0x3, 0x1, 0xdc5e, 0x0, 0x4, 0x3b, 0xffff, 0x1, 0xffffffff, 0xffff, 0x1, 0x400, 0x0, 0x2, 0x5, 0x1000, 0x8000, 0xfffffeff, 0x620a, 0x5, 0x2, 0x0, 0x8, 0x4, 0xdc, 0x2, 0xe, 0x7, 0x140000, 0xfffffff7, 0x1ff, 0x0, 0xb, 0xfd, 0xdd18, 0x0, 0x1, 0x40, 0x5, 0x7c43, 0x4, 0x2c, 0xffff, 0x8, 0x6, 0x200, 0x9, 0xffff, 0x9f, 0x6, 0x3, 0x100, 0x2, 0x9, 0x2, 0x9, 0x1, 0x100, 0x7, 0x5, 0xe, 0x24, 0x8001, 0x6, 0x8000, 0x3, 0xf2, 0x2, 0x1, 0x10001, 0xdeca, 0x4, 0xea, 0x6, 0x3, 0x8, 0x7ff, 0x9, 0x0, 0x8, 0x5b, 0x9, 0x4, 0xff, 0xbf02, 0x2e90a212, 0x40000c, 0x8, 0x20000000, 0x6, 0xffff, 0xfffff801, 0x2], 0x2, 0x400, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000b00)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x16b8c5b5213a03b5}) executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x2, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x298) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=35s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 24, 2, 2, 19, 1, 24, 30, 5, 30, 30, 9, 4, 14, 2, 1, 2, 23, 4, 5, 28, 2] detailed listing: executing program 0: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) unshare(0x22020600) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, &(0x7f00000025c0)=""/102398, &(0x7f000001b5c0)=0x18ffe) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0xffbffff7, 0xffffffff, 0x1}, 0x10) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000fd3f0000000000000900000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f0000000400), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000440)={0x20000014}) epoll_wait(r4, &(0x7f0000000480)=[{}], 0x1, 0x400) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/4100, 0x1004) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x4000040) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000ac0)={0x8cb, "761f41c1eff2835da5f44a67f54aeb425a8636c5ff3769bc70e6769f848f30df00f4775848257f32ace0aab77ac284df1f6a8ebfeed7d6f59916e7a3fb81cb1e8e52815b505fb9006afea6183466f01036c2663302a576f007980274fe17b899df2c946034fb815244f6b0b48321ec0c9b1b686b21d2c5448ae08057e60297761d4d11084f499b5d8014c77d7ca51ac0dee03f7e15da38323401e68b2e014502a09184142db66d4a4558d58886532e48222e7bb9cb4a028441553080041187e21df9552933ca8baf1e4c01be086ef35c7bd6230c4afe9f625bd78f052ac1cb3785e43409dd4ddd17f59cd5c39c6779ef9939156a0283714f514517df6a3cc79113c75bb7c783bfe0cb6c9e3f554acb2d58ec012452494b98f8f9e8cc178279b089eb91db93b7261367ddf201664278e80eebc1a9124cb5fa1b0d0b734e84b4fa1d4e83df588ed81ded2c697f7b0d7bf3e7fd6ea778ca1efd28dbf6feb532fe8dd5edb12bde258bb71692e895a05ee39f76fa764173c1944616e32c0cedede3b1c0c8df0d22178060a776f85c170d705018a13d79413cd82e238f1d3672d1c1682341a9d77d1799956dac97cac6c7eb47c5fe4002ddda1abf0b05cd21a0c3c63d4ae836e35d308baeedecef4be91d54ee576340112ecf28a5599e69a2d7f39fd3bc92903b99533376b4f65043659a3ef2abfff96bba69dd72e8e4465f6d2478f33d5543b8b43fafe30f4eeff97b3a30b5ef23a6f821fa4345aa953e0430cc65bc9cde2a26f558a2b7285d49d374f34be2f279a34d8c41a0d0084c28a64721d5f6c9e1038dc561c4f66c636e96578e8f37addf5eb611efcc05d5d9bd7e1e31b4f11229bf5e9afb27c3f27343eb48a07458130bb2b06247e2fb9d8c326d24d03de494ed53bf67f3f34127c09ba7ce72cd031b4e87cde5f80d1a778e19f4dde22cffa399fd8dd8fa3d432ccaa7529d63e1f82a8975ac7df407a12e6f2196e27e60ca745a5e75fe5e2c5fb6bcba51438dd06258b25457b52274168f6e44d64d8093723b696b905aca2ca8b9211ce648f1b47eb4fb11a616d28567789a827f44ab9ddf833013272228b422cbbd6ccdb39c6c9a21b80f0e02b7c3f03840cff30b021c4dae454dd9c2ada96191ab5346722429e192c0eb752595bbfe8eb76274953f2bd1c72782819a6958966cde10c40dc1106f2fde4b061137b0153b8443d9d21f1fa2fe0996263ad0d09872731913c8ea5f0cde134e11a7e59320bdda405a6ec251fd44a4e74668895b4ad9908e99af9db94ccf5697650b1cee0e4e3333ea2c826cea519f2de05bbe16fb47e10d940259d614fc12417657f6f7661e23c85c859bf0b7e5dbb553d108ab1d341705c1f5c61ed7c5eb9cd23693a54342e3c8a73e273e902a37c0766e36831b8c87ca5be3bed1ab1378e2accd32f84f38d7578fb7095ad8bf5dd38fbdaf68f214106548462ff363ddc432f0013ce7c02899df0d907ad9b682579c6c3f8e65b1dd288cb81060f174b0ef567ca8ea530300fb4e2a3a12f8e57322fb84c8580b6ff4dffac80fd332d7d0c1933dea78dc417ab33e7ee885b44ec473960046c11ac0642b7dbe1303d40fc6a401b7207d157a2eb0774ae02ea6fceb093a436a499cbb7d07aeb44eb9a44377e8f27387095964970136d6ba8593822ed3e35cc6cf125a72bdca8b79bbb919cab0553fcf28c3ecd5045f2cc6b64be93dbb70db717fbae9d9610e11fcf9f404c2978c189bb40449aa6784299133abb3c418aa03c52ad4cc04de8b97190c2b5adeb104a56f7c51faaaa57ca83e0fbd74451106baa70b752419df2af4f29902846235095183c451966235a748c7a7fa67bd3c39304e2e9b9e7ce3ea229a60dc3269d7ae528fb4a4f42021feda39a3d22cdd1c7fb146d5930c241de2961cef90ace185c812564ebf840a775e3f73acb3b507e4e8b6659f9ba8fee780f21a551fd607d48299b709b25201341e88c130508354137ec365cadfa72681f7ea6e090f38bcd67f5fd925482b73e07b43f4798a6c6afa698ddde0a0c543a7c64397cbf4c36179d9f59377e54edfb5979daa985eb82360d68f10a0c0355fee18281626c329fd8bcd18c0059f78c419bc7dd34df738a8aadef5a1f7feddd9390034c74a807b095c7eb51fb43823ff38c9b71a85f77df90c916063867798dbb83a7e011423ba8686875eb19e719448e23caf90e350e7601788db592fe286ae68f69c0fe67ec0535a0e70c3f371de82458a2949d9f10669294e1d8812d0317ceb7ce2980b4fe6a5bfc94de43e24cbe47cad99a076c7500ab51485c1bf41d3946fc0a56f660f907939d4e9f24d5fc442def5116cf40ba22da340c1271dbb8f7a8eed2fe8b2a40172ab8f27aeb8cddfa375ac31fc66ee835ab85b48b8e4953d0a6ea88a1726515b2dfe375405ba221b798125afc94c1ab936f87a1fb6ad38497a5c74aaa07fa8245d2418f70d251beee6d739f856bd22ae3337cf38625dc11c7f72ce0a3678916f209b1d66fefa5b95df0f0fbab95acdae4eedb84585320eaae1c9c34273d49fc12d4f4c618927724c9d3ae400344cfd6176f761f9dd6c884af556f339a984e7137fec2f24905e788ded329288d0ba9a43d9fd5dd49a98c076bd0ddca4357433d0b86ecfbd99d90c7ad6f893baf1567f94f7ac7a70585a633eab0e709f32a2fb2a851406974a1355a4093bb8874c69cecdccb36a23178eecdba72c0090724826747adcf6cf76cc11dcb1796826d3badf811df25cd6fc41c5f2fd850cc9218c13d00823cab29678689fb469ad1c37cadc583f15b49df3a1622102f9744004e822218db891322968003a7e98e535daf002fc38dbe87dc1eccd4270ddc1a70166f5de85b297a85daa8934fdfab6c284c1e4fc698a28fb479fc09f3ca653a786ae1d2e2727e24cbd6a81ee6078666ddbd18cc22203df5c02495cd13bb563fa26f876faed440f22ff7ce44d64b2d3c787a0bd90bd5de2d11b8e3c52c6ed6759d25035a39f57b37d88d2bbc0ae86c4f7292df22ddc4acf33441172e832117694cf1510061a7f0a2b0fc9eeab20e7bd0083838a5c410ef060c72d99040c00d8c76eca2a2127db232e17896d6e2032554a69634f909ec8fa7ee246fd8dc72e5b003122a08541e73f4114210da96eaa1fad40e9dd1e851ca88c71d84cfd0f740f"}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000240)=0x1002, 0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000002000000d00000000000f00183400000a180500000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000440)={0x0, 0xf, 0x1, "ed"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000001080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x8, 0x24200) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, &(0x7f00000002c0)={0x20, 0x22, 0xeb, {0xeb, 0x21, "5669c367224f441d849f1dc874d6981fdf93c15d2c92ff32d5cc10f4adc572432a2d87ff04cd40d57621525e8808ff4f47dbb374b19616cd22b818503783d70c0071e0083309d691c82459445b4ae80b0da4c02db4abd9286c524ddbca6d6902f01a44fc02971bf57631066ba294f2ad304afc6dcfe7a3395235ee52a3c0cc447f29cad6e5a06e94719807cf01db62e0157bd977d8eeef95e90c88be3c9a09df823b40245d4e6de5c154d31a6482c244bfc244ab8237efebb27ea38d697ba9c9a671622286d7a1acf3abd4b25aa989f8e5bb8308ea55ad48a68637d7a10773f11c45668ebbfd6972ad"}}, &(0x7f0000000480)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "66fb9b8b4c0742e9f2ccf197843e5b0e385a48bc30bc65f886595bf3aaba89f860ffe0745abb36f20358517ecde72926e5aa1f38bef760a2612a0378360eaff5e797b44ed498a79d088dce469569bb006830f5bb8b11c1907f3ec1afc0e678cf4b39d8efac4c45e0579d49ff14935807bc9ceb43cd0e352ef681cd1a7b45c9e0fcb7f813b730e622688c1fcf1c7da0403a52cd4aed74b53b2abf76f17847224be73a69cbf2e89c78462133be6a9909b9d88a7dafbe96b3aa8cb5117624fef455bcce97f9d22446a214a63e044bbd0af4964e60bc6782"}}}, &(0x7f0000000740)={0x2c, &(0x7f00000005c0)={0x0, 0x30, 0x26, "bb36fefcf5796d5c2c0b06284bfc87f7cde617e7e236fc6b3d6166c8ee7c1237690c9ce40a8d"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000006c0)={0xc0, 0x5, 0x6, "2ea444361736"}, &(0x7f0000000700)={0x40, 0x5, 0x5, "5e75c73377"}}) syz_usb_control_io$printer(r0, 0x0, 0x0) executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000ff8000000000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000030000000000000400000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) executing program 2: symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00') (async) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0xe00008da) (async, rerun: 32) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./bus\x00') (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x40) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480), 0x140, 0x0) r3 = dup(r2) read(r3, &(0x7f00000004c0)=""/189, 0xbd) fadvise64(r3, 0x3, 0x4000000005, 0x4) (async, rerun: 32) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)=0x20000) (async, rerun: 32) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000280)={0x101, 0x3, 0xfd}) (async) ioctl$MEMREAD(r1, 0xc0404d1a, &(0x7f0000000440)={0x8, 0x63, 0xd7, &(0x7f00000002c0)=""/99, &(0x7f0000000340)=""/215, 0x1, '\x00', {0xc3, 0x886, 0x55}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x42) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x3) executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) executing program 2: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) unshare(0x22020600) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, &(0x7f00000025c0)=""/102398, &(0x7f000001b5c0)=0x18ffe) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0xffbffff7, 0xffffffff, 0x1}, 0x10) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000fd3f0000000000000900000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000003c0), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000400), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000440)={0x20000014}) epoll_wait(r2, &(0x7f0000000480)=[{}], 0x1, 0x400) ppoll(&(0x7f00000004c0)=[{r2, 0x401}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$kcm(0x10, 0x2, 0x4) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/4100, 0x1004) executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) keyctl$dh_compute(0x17, &(0x7f0000000980), 0x0, 0x0, &(0x7f00000009c0)={0x0}) r3 = syz_open_dev$sndctrl(&(0x7f0000000a00), 0x84, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0485510, &(0x7f0000000a40)={0x0, 0x1, 0x1, 0x0, &(0x7f0000000ac0)=[{}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000b40)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0x1, 0x0, 0x2, 0x4, 0x0, 0x7, 0x8004, 0xa, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000b80)='X', 0x34000, 0x0, &(0x7f0000000bc0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000c00)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000cc0)={{0x0, 0xeeee0000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x5, 0x9, 0x10}, {0xffff1000, 0x200000, 0xd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x7}, {0x2000, 0x5000, 0xc, 0xff, 0x4, 0x4, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6, 0xfc}, {0x6000, 0xfffef001, 0x9, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x83}, {0xdddd0000, 0xb000, 0x0, 0x35, 0x3, 0x0, 0x42, 0x0, 0x0, 0x0, 0x3}, {0xeeef0000, 0xe6e31000, 0x8, 0xfe, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x30000, 0x2000, 0xf, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26, 0x0, 0x0, 0x1}, {0x80a0000, 0x807}, {0x7000}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0xfffffffffffffffc, 0x0, 0x0, [0x0, 0xe4, 0x1, 0x40]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000740), 0x8, 0x10, &(0x7f0000000780), 0x3f}, 0x16) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r5) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000e40)={'syzkaller0\x00', 0x1}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=@newtfilter={0x74, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1, 0xf}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xf, 0x800, 0x5, 0xf738, {0xb, 0x2, 0x0, 0x2, 0x200, 0x1}, {0x2, 0x1, 0x1, 0x0, 0xffff}, 0xd8, 0xeb}}]}]}}]}, 0x74}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000840)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x8004) executing program 6: unshare(0x6020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000002c0)={0x3, 0x0, 0xfffff3a2}) executing program 6: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) read(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r9, 0x80000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000cc0)) lseek(r0, 0x0, 0x3) r10 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) r11 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x10, 0x81, 0x80, 0x4}, {0x9, 0x5, 0xe, 0x2, 0x10, 0xd, 0xa, 0x9}, {0x9, 0x5, 0x9, 0x3, 0x20, 0x0, 0x0, 0xfd}}}}}}]}}, 0x0) syz_usb_ep_write(r11, 0x7, 0x9, &(0x7f0000000300)="39151cdff086a4bbcb") executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r2, @ANYBLOB="5c005a80140001800500070001000000050006000100000044000380120001000c"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000000c0)="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") r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0x3}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffe0f, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r8 = socket$inet6(0xa, 0x2, 0x0) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f0000008880), 0x45b, 0x2, 0x0) unshare(0x62020400) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r9, 0x0, 0x5, &(0x7f0000000240)={@loopback, @multicast2, 0xfffb, "66c5aff8a7eb17f1f6cec2e7780795478c84aea31700", 0x96bf, 0x2, 0x7a, 0x6b}, 0x3c) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000000), 0x4) socket(0x10, 0x3, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4001010) executing program 2: madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r0, &(0x7f0000000740)='0', 0x1) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\t/'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000780)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000020a09040000000000000000020000000900010073797a3000000000090001e173797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0x74}, 0x1, 0xf5ffffff}, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x80000000000000a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) epoll_create(0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309180008000a00", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800070008000000062102000100000008000500", @ANYRES16=r0], 0x54}, 0x1, 0x0, 0x5000000, 0x24004845}, 0x8000002) executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000ffffff800000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000fffffffd7f000000000000005504000001ed0a002500000017ff2000dd40000000000000730a13fe000000003e04000000000000e5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800d9b3a69b37caa964e4b7000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325a904514d8e90131bfc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f49e4dcc1b7af0b51b9cafeda067b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb860600911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b30e55ac1275e938706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff0492df6b53002514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa250bc93b233a2291b5b10eebc49b6882f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753446de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000010000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468db"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) executing program 5: r0 = syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000500)=ANY=[@ANYBLOB="120110030000004035120182400001020301090286080000003009080b00010107208c0904000000010120000924010040041d000708240a0001ff23030c240302"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="004e82a3adfc8c4409e6f5030400000004034308"], 0x0, 0x0, 0x0}, 0x0) executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'team0\x00', 0x1}, 0x18) close(0x3) r1 = syz_open_dev$sndpcmc(&(0x7f0000000540), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f00000009c0)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000c40)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1c79, &(0x7f0000000d00)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000e40)=0x7) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000020000008520000004000000184a00000200000000000000000000007c94000010000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r6, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x80}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2f}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x4}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x4880) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000180)) executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001701000001e500000000d8936e75a545998a2db3c561ef65a300000000000018000000000000001701000004000000fffbffff00000000"], 0x30, 0x40}], 0x1, 0x40800) executing program 6: unshare(0x6020400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000200)={0x4004, r0, 0x2}) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, 0x0) executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x12, 0x0, {0xc, 0xd}, {0xc, 0x5}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048810}, 0x2000000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f00000005c0)={0xdf, 0x0, 0x80000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x4, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001b80)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0x270, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) mprotect(&(0x7f0000e15000/0x2000)=nil, 0x2000, 0x2) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000001f80)={'ip6_vti0\x00', &(0x7f0000001fc0)=@ethtool_cmd={0x41, 0x5, 0x3, 0x0, 0x7, 0x0, 0x0, 0xfc, 0x0, 0xfc, 0x0, 0xfffffff9, 0x0, 0xff, 0x0, 0x45, [0x0, 0x6]}}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f0000019100400014000200100011"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000100)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000240)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x1, 0x5f6, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x24}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_open_dev$media(&(0x7f00000003c0), 0x6be, 0xc8683) ioctl$MEDIA_IOC_REQUEST_ALLOC(r10, 0x80047c05, &(0x7f0000000480)) r11 = dup(r9) syz_ublk_setup_queues(r11, r8, &(0x7f0000000340)={0x0, 0x20fb87, 0x1, 0xfffffffd, 0x32c}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xba5e, 0x8000, 0x1006, 0x160, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6605, 0x200, 0x10000000, 0x546}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88db, 0x10000, 0x3, 0xfffffffc, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000000, 0x8000, 0x2, 0xbd, 0x0, r3}}], 0x1, &(0x7f0000000540)={0x2e, 0x54, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r7, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) ioctl$MEMREADOOB(r11, 0xc0104d04, &(0x7f0000000500)={0x6, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_modify_offsets$flags(r4, r12, 0x38, 0xfffffffa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x14) syz_usb_connect(0x3, 0x96d, &(0x7f0000000a80)=ANY=[@ANYBLOB="12010102e21b5140b1134200e8a90102030109025b09040d9720090904320409f073ea09090503002000f80040090504104000"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r11, 0x7b2, &(0x7f0000001b40)={&(0x7f0000000b40)=[0x5, 0xaa4, 0xdb, 0x7, 0xd, 0x800, 0x401, 0xf, 0x4, 0x6, 0x800, 0x40, 0x6, 0x4, 0xfffffffe, 0x40d, 0xff, 0x1, 0xc6, 0x100, 0x6, 0x3, 0x80000001, 0xbfb, 0x2, 0x6, 0x8, 0x6, 0x5, 0x64fe2241, 0x6, 0x5, 0x8, 0x8, 0x8b, 0x2, 0x69, 0x3, 0x6, 0xadb433a, 0x10000, 0xffff96d0, 0x0, 0x0, 0x0, 0x2, 0x1000, 0x401, 0x5, 0x0, 0x8001, 0x400, 0x2, 0x5, 0x80, 0x400, 0x5, 0x9, 0x80000001, 0x10001, 0x9, 0x4, 0x8000, 0x7, 0x1, 0x7, 0xffff8000, 0xfffffff7, 0x5, 0x6, 0x0, 0x1, 0xfffffffc, 0x7, 0x7ff, 0x8000, 0x4, 0x2, 0x6, 0x0, 0x2, 0x2, 0x86b, 0x3, 0x5, 0x65c8049d, 0x8, 0x8, 0x6, 0x2, 0xe1, 0x9, 0x6, 0x4, 0x0, 0x3, 0x5, 0x101, 0x9, 0x3, 0x0, 0x0, 0x2, 0x3, 0x3, 0x80000001, 0x5664, 0x80, 0x75, 0x3, 0x8, 0xee, 0x8000, 0x1, 0x10000, 0x7f, 0xa4c, 0x5, 0x80, 0xb, 0x8, 0xb, 0xd, 0xfffffffe, 0x9, 0x1432, 0x0, 0x0, 0x6, 0x1, 0xdb71, 0xffff, 0x4, 0x101, 0x3, 0xc3b9, 0x1, 0x2, 0xb1e4, 0x9, 0x3, 0xe, 0x80000001, 0x8, 0x401, 0x1, 0x7, 0x2, 0x385, 0xde, 0xab84, 0xde, 0x8001, 0x7, 0x7, 0x8000, 0x9, 0x2, 0x2, 0x9, 0x2, 0x5, 0x9, 0x0, 0x6, 0x2, 0x5, 0x81, 0x1000, 0x7, 0x4, 0x40, 0x2, 0x8, 0x10000, 0x9, 0xfffffffe, 0x2, 0xfffffffb, 0x5, 0x1, 0x1, 0x10, 0x2549, 0x5, 0x200, 0x0, 0xeb2, 0x3, 0x2, 0x2, 0xc, 0x6, 0x3ff, 0xffffe3dc, 0x2, 0x9, 0x8, 0xffffdd5e, 0x80, 0xfff, 0x2, 0x1, 0x0, 0x200, 0xe48d, 0xfffff8ee, 0xb1, 0x81, 0xeb, 0x3, 0x0, 0x1, 0x80000001, 0x5, 0x1ff, 0x7, 0x7, 0x5, 0x2, 0x6a38bf39, 0x6, 0x7ff, 0x1bb800, 0x7, 0x5, 0x4, 0x3ff, 0x81, 0x8000, 0x7f, 0x66, 0xffffffff, 0x80, 0x9, 0x0, 0x226a, 0x8, 0x4, 0x790, 0x0, 0xffff8001, 0x8f, 0xbbf, 0x5, 0xffff, 0x9, 0xb83, 0x5, 0x0, 0x6, 0x4, 0x3b, 0x2, 0x8001, 0x8, 0xb9e, 0x6, 0x3, 0x0, 0x9, 0x6, 0x3, 0xfffffff9, 0x7ff, 0x100, 0x0, 0x81, 0x3ff, 0x8, 0x400, 0x9, 0x4, 0x7, 0x8, 0x6, 0x11, 0x1, 0xfffffffd, 0x5, 0xe7cb, 0x3, 0x5, 0xc, 0xff, 0x400, 0x4, 0xb30, 0xe4, 0x7fffffff, 0x9, 0x7, 0xa, 0x1afa, 0x2, 0x6, 0x2, 0x6, 0x1, 0x5, 0x9, 0x2, 0x8001, 0xe, 0x1, 0xfffffffe, 0x2, 0x0, 0x7, 0x66, 0xfffffffa, 0x5, 0x6, 0xe, 0x4, 0x2, 0xe38, 0x3, 0x80, 0xdb23, 0x1, 0x6456, 0x6000000, 0x8, 0xffff, 0x9, 0x0, 0x8d, 0x56, 0xb, 0x2, 0x4, 0x7ff, 0x8, 0x0, 0x9, 0x2f, 0x7, 0x1, 0x1, 0x3, 0x4, 0x4, 0x80, 0x4, 0x9, 0x3, 0xffffff5b, 0x5, 0x48f, 0x7, 0x0, 0xb753, 0xb7a6, 0xfff, 0x2, 0x9, 0x9, 0x6, 0x3, 0x4, 0x20, 0xe223, 0x80, 0x5, 0xfffffffe, 0x1, 0xfffffffb, 0x100, 0x3, 0x115d, 0xfffffff9, 0x5, 0x2, 0x5, 0x7, 0x6236a69d, 0x1, 0xffffffff, 0x0, 0x0, 0x1, 0x8c, 0x4, 0x8, 0xc, 0x77, 0x9, 0xf, 0x6, 0x1d7, 0x6, 0x9, 0xffffffff, 0x7, 0xf2, 0x5, 0x9, 0x3, 0x3, 0x9, 0x0, 0xc, 0x1, 0x3, 0x1, 0x2, 0x3, 0x1, 0xe0, 0x6, 0x9, 0x9, 0x7, 0x7fff, 0x80000001, 0xa429, 0x6, 0xf20, 0x7fffffff, 0x8, 0x2, 0x0, 0x100, 0x6, 0x7, 0x7, 0x6, 0x7, 0x6, 0x8, 0x8, 0x6, 0x7, 0x0, 0xc06, 0x9, 0xf0, 0x6, 0x7ff, 0xe00, 0x12a4, 0x0, 0x3, 0x8ae0, 0xffffffe7, 0x2, 0x4, 0x9, 0x0, 0x80, 0x10001, 0x7, 0x4, 0x8, 0x4, 0x5, 0x4, 0x4, 0x4, 0xf3, 0xfffffffe, 0x5, 0x0, 0xe22, 0x67, 0x7, 0x0, 0x6, 0x2, 0x1, 0x1, 0x9, 0x4, 0x4d, 0x0, 0x0, 0x55, 0x8000, 0xfd, 0xfffffff7, 0x9, 0x10001, 0x10000, 0x81e, 0xaaa0, 0x3, 0xc60, 0x88, 0x10a6, 0x8, 0xef9f, 0x7, 0x7fff, 0x5, 0x6, 0x8e8, 0x200, 0x0, 0x7ff, 0x0, 0x3, 0x100, 0x1, 0x2, 0x2, 0x0, 0x6, 0x0, 0x5cb6, 0x5, 0x0, 0x7e64, 0x0, 0x3, 0x5, 0x9, 0x254, 0xb86, 0x1ab2e81, 0x30ba, 0xb772, 0xd, 0x6, 0x5, 0x8000, 0x0, 0x0, 0x1, 0x2, 0x67db375a, 0x7fff, 0x80000001, 0x4, 0x9, 0x5, 0x8, 0x3, 0xb00e, 0xf0b, 0x833, 0x5b, 0x3, 0x40, 0x80000001, 0xb, 0x4, 0x2, 0x0, 0x9, 0xf, 0x6, 0x200, 0x1, 0x5, 0x6, 0x7, 0x1ff, 0x8, 0x18, 0xc90, 0x6, 0x0, 0x8, 0x9, 0x800, 0x3, 0x7, 0x1000, 0xc, 0x6, 0x7, 0xfff, 0x9, 0x7fff8000, 0x1, 0xff800000, 0xca, 0x6, 0x3, 0x2, 0x8, 0x5, 0x5, 0xfffffffe, 0x10001, 0x400, 0x3, 0xffffffae, 0x4, 0x3, 0x7, 0x2, 0x9, 0xfffffbff, 0x0, 0x0, 0x4, 0x4, 0x3, 0x5, 0x7, 0x0, 0x1, 0x7, 0x8, 0x7, 0x5, 0x5, 0x404, 0x8, 0x7, 0x9, 0x5, 0x4d1, 0x6, 0x80000000, 0x5, 0x9f, 0x4, 0xfffffff8, 0x7ff, 0x2, 0x40000000, 0xc3, 0xa293, 0x2, 0x9, 0xd, 0x8, 0x3, 0x1fed, 0x8, 0x1, 0x9, 0x3, 0x1, 0xb0, 0x5, 0x42d, 0xfffffff9, 0x4, 0x8001, 0x51, 0x80, 0x6, 0x6, 0x100, 0x0, 0x7, 0x93dd, 0x6, 0x13, 0x81, 0x8, 0x81, 0x2b, 0x0, 0x5, 0x2, 0x2, 0xc3c, 0x4, 0x2, 0x9, 0x4, 0x6, 0x2, 0x8, 0x2, 0x3b, 0x5, 0x0, 0x5, 0x6, 0xf, 0x37, 0xffff, 0xb9, 0xca12, 0x324bc677, 0x0, 0x9, 0xffff, 0xf5, 0x7ff, 0x40, 0x101, 0x0, 0x8, 0x400, 0xbd, 0x0, 0x5, 0x1, 0x3, 0x80, 0x800, 0x4, 0x7f, 0x1, 0x8, 0x7, 0x2, 0x0, 0x6, 0xfffffffa, 0x8, 0xff6, 0x8000000, 0x9, 0x6, 0x8, 0x6, 0x0, 0x4, 0x5, 0x4, 0x0, 0x138a, 0x0, 0x7f, 0x0, 0xfffffff8, 0x1, 0x0, 0x6, 0x2, 0x6, 0x8f, 0x5, 0x3a, 0x8, 0xc0, 0x6a3b, 0x2, 0xffffff86, 0x35, 0x2, 0x8, 0x4, 0xa, 0x2, 0x1, 0x7f000, 0x8, 0x449, 0x9, 0x200, 0x8, 0x86, 0x4, 0x800, 0x4, 0xffff, 0x8, 0x2, 0x5, 0x9, 0x200, 0x6, 0x67, 0xffffffff, 0xfff, 0x3, 0x8, 0x8000, 0x2, 0x12a, 0x8, 0x6, 0x8, 0x25, 0x5, 0x38, 0x5, 0x8, 0x4, 0x39, 0x9745, 0xa2a, 0x81, 0x7, 0x6, 0x4, 0x4, 0xfffffff7, 0x516f, 0x8, 0x1, 0x400, 0x3ff, 0x360, 0x2b0c2d27, 0x0, 0x2, 0x101, 0x12, 0x3, 0xdea, 0x3, 0x6a, 0x1ff, 0x2, 0x6, 0xfffffff8, 0x8001, 0x5, 0x401, 0x2, 0x2, 0x0, 0x1, 0x0, 0x200, 0x10, 0x9, 0x9, 0x3, 0x3, 0x1, 0x3, 0xd, 0x2e0, 0x401, 0x8000, 0x0, 0xae, 0x4, 0x4, 0x6, 0x9f58, 0x9, 0x8, 0x1, 0x2, 0x9, 0x8, 0x2, 0x9, 0x2, 0x20, 0x4, 0xf, 0x401, 0x1, 0x401, 0x3, 0x0, 0x3, 0xc, 0x800, 0x28000000, 0x3, 0x5af9, 0x0, 0xb6c, 0x8, 0xb907, 0x4, 0x7, 0xffff2d21, 0x485, 0x1000, 0x6, 0x4, 0x1, 0x81, 0x2, 0xbd1e, 0x6, 0x33, 0xd, 0x80, 0x8, 0xf9, 0x7fffffff, 0x10001, 0x11, 0x1, 0xe, 0x0, 0x4, 0x9, 0xffffffff, 0x7, 0x9, 0x5, 0x7f1f, 0x7, 0x7, 0x8, 0x3, 0x7, 0xc, 0x7, 0x3, 0x0, 0x2, 0x40, 0xd, 0x9, 0x9, 0x200, 0x40, 0x31cc, 0xffff56d2, 0x20000000, 0xfff, 0x9, 0x5, 0x5, 0xfffffff9, 0x0, 0xff, 0x100, 0x3, 0x6, 0x0, 0x8b, 0x200, 0x80, 0x2, 0xffff, 0x8001, 0xd8c7378, 0x1, 0x4, 0x0, 0x5, 0x3, 0x3, 0x1, 0xdc5e, 0x0, 0x4, 0x3b, 0xffff, 0x1, 0xffffffff, 0xffff, 0x1, 0x400, 0x0, 0x2, 0x5, 0x1000, 0x8000, 0xfffffeff, 0x620a, 0x5, 0x2, 0x0, 0x8, 0x4, 0xdc, 0x2, 0xe, 0x7, 0x140000, 0xfffffff7, 0x1ff, 0x0, 0xb, 0xfd, 0xdd18, 0x0, 0x1, 0x40, 0x5, 0x7c43, 0x4, 0x2c, 0xffff, 0x8, 0x6, 0x200, 0x9, 0xffff, 0x9f, 0x6, 0x3, 0x100, 0x2, 0x9, 0x2, 0x9, 0x1, 0x100, 0x7, 0x5, 0xe, 0x24, 0x8001, 0x6, 0x8000, 0x3, 0xf2, 0x2, 0x1, 0x10001, 0xdeca, 0x4, 0xea, 0x6, 0x3, 0x8, 0x7ff, 0x9, 0x0, 0x8, 0x5b, 0x9, 0x4, 0xff, 0xbf02, 0x2e90a212, 0x40000c, 0x8, 0x20000000, 0x6, 0xffff, 0xfffff801, 0x2], 0x2, 0x400, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000b00)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x16b8c5b5213a03b5}) executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x2, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x298) program did not crash bisect: split chunk #1 of len 14 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=35s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 24, 2, 2, 19, 1, 24, 30, 5, 10, 2, 28, 5, 6, 4, 1, 2, 23, 4, 5, 28, 2] detailed listing: executing program 0: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) unshare(0x22020600) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, &(0x7f00000025c0)=""/102398, &(0x7f000001b5c0)=0x18ffe) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0xffbffff7, 0xffffffff, 0x1}, 0x10) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000fd3f0000000000000900000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f0000000400), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000440)={0x20000014}) epoll_wait(r4, &(0x7f0000000480)=[{}], 0x1, 0x400) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/4100, 0x1004) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x4000040) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000ac0)={0x8cb, "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"}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000240)=0x1002, 0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000002000000d00000000000f00183400000a180500000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000440)={0x0, 0xf, 0x1, "ed"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000001080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x8, 0x24200) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, &(0x7f00000002c0)={0x20, 0x22, 0xeb, {0xeb, 0x21, "5669c367224f441d849f1dc874d6981fdf93c15d2c92ff32d5cc10f4adc572432a2d87ff04cd40d57621525e8808ff4f47dbb374b19616cd22b818503783d70c0071e0083309d691c82459445b4ae80b0da4c02db4abd9286c524ddbca6d6902f01a44fc02971bf57631066ba294f2ad304afc6dcfe7a3395235ee52a3c0cc447f29cad6e5a06e94719807cf01db62e0157bd977d8eeef95e90c88be3c9a09df823b40245d4e6de5c154d31a6482c244bfc244ab8237efebb27ea38d697ba9c9a671622286d7a1acf3abd4b25aa989f8e5bb8308ea55ad48a68637d7a10773f11c45668ebbfd6972ad"}}, &(0x7f0000000480)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "66fb9b8b4c0742e9f2ccf197843e5b0e385a48bc30bc65f886595bf3aaba89f860ffe0745abb36f20358517ecde72926e5aa1f38bef760a2612a0378360eaff5e797b44ed498a79d088dce469569bb006830f5bb8b11c1907f3ec1afc0e678cf4b39d8efac4c45e0579d49ff14935807bc9ceb43cd0e352ef681cd1a7b45c9e0fcb7f813b730e622688c1fcf1c7da0403a52cd4aed74b53b2abf76f17847224be73a69cbf2e89c78462133be6a9909b9d88a7dafbe96b3aa8cb5117624fef455bcce97f9d22446a214a63e044bbd0af4964e60bc6782"}}}, &(0x7f0000000740)={0x2c, &(0x7f00000005c0)={0x0, 0x30, 0x26, "bb36fefcf5796d5c2c0b06284bfc87f7cde617e7e236fc6b3d6166c8ee7c1237690c9ce40a8d"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000006c0)={0xc0, 0x5, 0x6, "2ea444361736"}, &(0x7f0000000700)={0x40, 0x5, 0x5, "5e75c73377"}}) syz_usb_control_io$printer(r0, 0x0, 0x0) executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000ff8000000000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000030000000000000400000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) executing program 2: symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00') (async) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0xe00008da) (async, rerun: 32) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./bus\x00') (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x40) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480), 0x140, 0x0) r3 = dup(r2) read(r3, &(0x7f00000004c0)=""/189, 0xbd) fadvise64(r3, 0x3, 0x4000000005, 0x4) (async, rerun: 32) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)=0x20000) (async, rerun: 32) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000280)={0x101, 0x3, 0xfd}) (async) ioctl$MEMREAD(r1, 0xc0404d1a, &(0x7f0000000440)={0x8, 0x63, 0xd7, &(0x7f00000002c0)=""/99, &(0x7f0000000340)=""/215, 0x1, '\x00', {0xc3, 0x886, 0x55}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x42) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x3) executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) executing program 2: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) unshare(0x22020600) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, &(0x7f00000025c0)=""/102398, &(0x7f000001b5c0)=0x18ffe) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0xffbffff7, 0xffffffff, 0x1}, 0x10) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000fd3f0000000000000900000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000003c0), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000400), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000440)={0x20000014}) epoll_wait(r2, &(0x7f0000000480)=[{}], 0x1, 0x400) ppoll(&(0x7f00000004c0)=[{r2, 0x401}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$kcm(0x10, 0x2, 0x4) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/4100, 0x1004) executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) keyctl$dh_compute(0x17, &(0x7f0000000980), 0x0, 0x0, &(0x7f00000009c0)={0x0}) r3 = syz_open_dev$sndctrl(&(0x7f0000000a00), 0x84, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0485510, &(0x7f0000000a40)={0x0, 0x1, 0x1, 0x0, &(0x7f0000000ac0)=[{}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000b40)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0x1, 0x0, 0x2, 0x4, 0x0, 0x7, 0x8004, 0xa, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000b80)='X', 0x34000, 0x0, &(0x7f0000000bc0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000c00)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000cc0)={{0x0, 0xeeee0000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x5, 0x9, 0x10}, {0xffff1000, 0x200000, 0xd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x7}, {0x2000, 0x5000, 0xc, 0xff, 0x4, 0x4, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6, 0xfc}, {0x6000, 0xfffef001, 0x9, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x83}, {0xdddd0000, 0xb000, 0x0, 0x35, 0x3, 0x0, 0x42, 0x0, 0x0, 0x0, 0x3}, {0xeeef0000, 0xe6e31000, 0x8, 0xfe, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x30000, 0x2000, 0xf, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26, 0x0, 0x0, 0x1}, {0x80a0000, 0x807}, {0x7000}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0xfffffffffffffffc, 0x0, 0x0, [0x0, 0xe4, 0x1, 0x40]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000740), 0x8, 0x10, &(0x7f0000000780), 0x3f}, 0x16) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r5) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000e40)={'syzkaller0\x00', 0x1}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=@newtfilter={0x74, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1, 0xf}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xf, 0x800, 0x5, 0xf738, {0xb, 0x2, 0x0, 0x2, 0x200, 0x1}, {0x2, 0x1, 0x1, 0x0, 0xffff}, 0xd8, 0xeb}}]}]}}]}, 0x74}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000840)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x8004) executing program 4: unshare(0x6020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000002c0)={0x3, 0x0, 0xfffff3a2}) executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80001001300100000000000fbdbdf25fc000000000000000000000000000000fc000000000000000000000000000001000000044e2400000a0060203b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0xfffffffffffffdee, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x40000001}, 0x24004000) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000ffffff8000000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc01000000000000000080ff00000000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) (async) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001740)={{r0}, r1, 0x18, @inherit={0x98, &(0x7f00000003c0)={0x1, 0xa, 0xef, 0x3, {0x0, 0x7, 0x1, 0x8000000000000000, 0x6}, [0x48c9, 0x4, 0xc010, 0xfffffffffffffffc, 0x1000, 0x5c8d, 0x9, 0x8001, 0x1, 0xff]}}, @subvolid=0x2}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001740)={{r0}, r1, 0x18, @inherit={0x98, &(0x7f00000003c0)={0x1, 0xa, 0xef, 0x3, {0x0, 0x7, 0x1, 0x8000000000000000, 0x6}, [0x48c9, 0x4, 0xc010, 0xfffffffffffffffc, 0x1000, 0x5c8d, 0x9, 0x8001, 0x1, 0xff]}}, @subvolid=0x2}) poll(0x0, 0x0, 0x2) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) (async) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044402, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000001c0)={0x0, 0x0, 0x10001, 0x5}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000000700)={0xc, {"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", 0x1000}}, 0x104a) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0002003c0001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010400028005000100010000003c000380"], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000003f0026012bbd700000000000117c00000400fc800c00018055fd0400", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000140007000001000000000000000000000000000100009d00", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) executing program 0: syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8a16, 0x3a10, 0x3, 0x31d}, &(0x7f0000000500), &(0x7f0000000580), &(0x7f0000000180)) syz_clone(0x100111, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) r0 = eventfd(0x0) io_submit(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xc2, r0, &(0x7f0000000140)="0100fd6400000000", 0x8, 0x36, 0x0, 0x0, r0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001701000001e500000000d8936e75a545998a2db3c561ef65a300000000000018000000000000001701000004000000fffbffff00000000"], 0x30, 0x40}], 0x1, 0x40800) executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) executing program 5: r0 = syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000500)=ANY=[@ANYBLOB="120110030000004035120182400001020301090286080000003009080b00010107208c0904000000010120000924010040041d000708240a0001ff23030c240302"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="004e82a3adfc8c4409e6f5030400000004034308"], 0x0, 0x0, 0x0}, 0x0) executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'team0\x00', 0x1}, 0x18) close(0x3) r1 = syz_open_dev$sndpcmc(&(0x7f0000000540), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f00000009c0)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000c40)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1c79, &(0x7f0000000d00)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000e40)=0x7) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000070e624618780e663a6ad3f996f37381f72000034ffac913a50583a1a32002695b61efd1b936f36509da3d0b16308fda277e185fc2621ada4e2c7c0ea3590074f764e2edfcc0a89053afde9c9569cef6d0c8a2d21f7a00aad04c51daffce9b81ec0c6d0e7320a99f8588c9a043d73eb0e8e256afa2eada13f068a74c6080b6367b250260100010014fcd19c931e8ff5c21521b1d2dd6c099f45599ce9ef3e9a97d32bfc197e1a82ed773c79c0e7222a0aaed827b1a458b4a6f1b00db798b630b30a0d68a7ab22d2c2fdff79b571a3d3c40274032d59e7ff76bb54b70232c7c80f162556e9d05fdc3d12b6a453e0ea802972966ab2c7d59d7b6e4c127a5ccd88211b30b90f31dd", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000020000008520000004000000184a00000200000000000000000000007c94000010000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r6, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x80}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2f}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x4}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x4880) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000180)) executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001701000001e500000000d8936e75a545998a2db3c561ef65a300000000000018000000000000001701000004000000fffbffff00000000"], 0x30, 0x40}], 0x1, 0x40800) executing program 6: unshare(0x6020400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000200)={0x4004, r0, 0x2}) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, 0x0) executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x12, 0x0, {0xc, 0xd}, {0xc, 0x5}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048810}, 0x2000000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f00000005c0)={0xdf, 0x0, 0x80000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x4, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001b80)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0x270, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) mprotect(&(0x7f0000e15000/0x2000)=nil, 0x2000, 0x2) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000001f80)={'ip6_vti0\x00', &(0x7f0000001fc0)=@ethtool_cmd={0x41, 0x5, 0x3, 0x0, 0x7, 0x0, 0x0, 0xfc, 0x0, 0xfc, 0x0, 0xfffffff9, 0x0, 0xff, 0x0, 0x45, [0x0, 0x6]}}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f0000019100400014000200100011"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000100)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000240)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x1, 0x5f6, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x24}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_open_dev$media(&(0x7f00000003c0), 0x6be, 0xc8683) ioctl$MEDIA_IOC_REQUEST_ALLOC(r10, 0x80047c05, &(0x7f0000000480)) r11 = dup(r9) syz_ublk_setup_queues(r11, r8, &(0x7f0000000340)={0x0, 0x20fb87, 0x1, 0xfffffffd, 0x32c}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xba5e, 0x8000, 0x1006, 0x160, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6605, 0x200, 0x10000000, 0x546}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88db, 0x10000, 0x3, 0xfffffffc, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000000, 0x8000, 0x2, 0xbd, 0x0, r3}}], 0x1, &(0x7f0000000540)={0x2e, 0x54, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r7, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) ioctl$MEMREADOOB(r11, 0xc0104d04, &(0x7f0000000500)={0x6, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_modify_offsets$flags(r4, r12, 0x38, 0xfffffffa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x14) syz_usb_connect(0x3, 0x96d, &(0x7f0000000a80)=ANY=[@ANYBLOB="12010102e21b5140b1134200e8a90102030109025b09040d9720090904320409f073ea09090503002000f80040090504104000"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r11, 0x7b2, &(0x7f0000001b40)={&(0x7f0000000b40)=[0x5, 0xaa4, 0xdb, 0x7, 0xd, 0x800, 0x401, 0xf, 0x4, 0x6, 0x800, 0x40, 0x6, 0x4, 0xfffffffe, 0x40d, 0xff, 0x1, 0xc6, 0x100, 0x6, 0x3, 0x80000001, 0xbfb, 0x2, 0x6, 0x8, 0x6, 0x5, 0x64fe2241, 0x6, 0x5, 0x8, 0x8, 0x8b, 0x2, 0x69, 0x3, 0x6, 0xadb433a, 0x10000, 0xffff96d0, 0x0, 0x0, 0x0, 0x2, 0x1000, 0x401, 0x5, 0x0, 0x8001, 0x400, 0x2, 0x5, 0x80, 0x400, 0x5, 0x9, 0x80000001, 0x10001, 0x9, 0x4, 0x8000, 0x7, 0x1, 0x7, 0xffff8000, 0xfffffff7, 0x5, 0x6, 0x0, 0x1, 0xfffffffc, 0x7, 0x7ff, 0x8000, 0x4, 0x2, 0x6, 0x0, 0x2, 0x2, 0x86b, 0x3, 0x5, 0x65c8049d, 0x8, 0x8, 0x6, 0x2, 0xe1, 0x9, 0x6, 0x4, 0x0, 0x3, 0x5, 0x101, 0x9, 0x3, 0x0, 0x0, 0x2, 0x3, 0x3, 0x80000001, 0x5664, 0x80, 0x75, 0x3, 0x8, 0xee, 0x8000, 0x1, 0x10000, 0x7f, 0xa4c, 0x5, 0x80, 0xb, 0x8, 0xb, 0xd, 0xfffffffe, 0x9, 0x1432, 0x0, 0x0, 0x6, 0x1, 0xdb71, 0xffff, 0x4, 0x101, 0x3, 0xc3b9, 0x1, 0x2, 0xb1e4, 0x9, 0x3, 0xe, 0x80000001, 0x8, 0x401, 0x1, 0x7, 0x2, 0x385, 0xde, 0xab84, 0xde, 0x8001, 0x7, 0x7, 0x8000, 0x9, 0x2, 0x2, 0x9, 0x2, 0x5, 0x9, 0x0, 0x6, 0x2, 0x5, 0x81, 0x1000, 0x7, 0x4, 0x40, 0x2, 0x8, 0x10000, 0x9, 0xfffffffe, 0x2, 0xfffffffb, 0x5, 0x1, 0x1, 0x10, 0x2549, 0x5, 0x200, 0x0, 0xeb2, 0x3, 0x2, 0x2, 0xc, 0x6, 0x3ff, 0xffffe3dc, 0x2, 0x9, 0x8, 0xffffdd5e, 0x80, 0xfff, 0x2, 0x1, 0x0, 0x200, 0xe48d, 0xfffff8ee, 0xb1, 0x81, 0xeb, 0x3, 0x0, 0x1, 0x80000001, 0x5, 0x1ff, 0x7, 0x7, 0x5, 0x2, 0x6a38bf39, 0x6, 0x7ff, 0x1bb800, 0x7, 0x5, 0x4, 0x3ff, 0x81, 0x8000, 0x7f, 0x66, 0xffffffff, 0x80, 0x9, 0x0, 0x226a, 0x8, 0x4, 0x790, 0x0, 0xffff8001, 0x8f, 0xbbf, 0x5, 0xffff, 0x9, 0xb83, 0x5, 0x0, 0x6, 0x4, 0x3b, 0x2, 0x8001, 0x8, 0xb9e, 0x6, 0x3, 0x0, 0x9, 0x6, 0x3, 0xfffffff9, 0x7ff, 0x100, 0x0, 0x81, 0x3ff, 0x8, 0x400, 0x9, 0x4, 0x7, 0x8, 0x6, 0x11, 0x1, 0xfffffffd, 0x5, 0xe7cb, 0x3, 0x5, 0xc, 0xff, 0x400, 0x4, 0xb30, 0xe4, 0x7fffffff, 0x9, 0x7, 0xa, 0x1afa, 0x2, 0x6, 0x2, 0x6, 0x1, 0x5, 0x9, 0x2, 0x8001, 0xe, 0x1, 0xfffffffe, 0x2, 0x0, 0x7, 0x66, 0xfffffffa, 0x5, 0x6, 0xe, 0x4, 0x2, 0xe38, 0x3, 0x80, 0xdb23, 0x1, 0x6456, 0x6000000, 0x8, 0xffff, 0x9, 0x0, 0x8d, 0x56, 0xb, 0x2, 0x4, 0x7ff, 0x8, 0x0, 0x9, 0x2f, 0x7, 0x1, 0x1, 0x3, 0x4, 0x4, 0x80, 0x4, 0x9, 0x3, 0xffffff5b, 0x5, 0x48f, 0x7, 0x0, 0xb753, 0xb7a6, 0xfff, 0x2, 0x9, 0x9, 0x6, 0x3, 0x4, 0x20, 0xe223, 0x80, 0x5, 0xfffffffe, 0x1, 0xfffffffb, 0x100, 0x3, 0x115d, 0xfffffff9, 0x5, 0x2, 0x5, 0x7, 0x6236a69d, 0x1, 0xffffffff, 0x0, 0x0, 0x1, 0x8c, 0x4, 0x8, 0xc, 0x77, 0x9, 0xf, 0x6, 0x1d7, 0x6, 0x9, 0xffffffff, 0x7, 0xf2, 0x5, 0x9, 0x3, 0x3, 0x9, 0x0, 0xc, 0x1, 0x3, 0x1, 0x2, 0x3, 0x1, 0xe0, 0x6, 0x9, 0x9, 0x7, 0x7fff, 0x80000001, 0xa429, 0x6, 0xf20, 0x7fffffff, 0x8, 0x2, 0x0, 0x100, 0x6, 0x7, 0x7, 0x6, 0x7, 0x6, 0x8, 0x8, 0x6, 0x7, 0x0, 0xc06, 0x9, 0xf0, 0x6, 0x7ff, 0xe00, 0x12a4, 0x0, 0x3, 0x8ae0, 0xffffffe7, 0x2, 0x4, 0x9, 0x0, 0x80, 0x10001, 0x7, 0x4, 0x8, 0x4, 0x5, 0x4, 0x4, 0x4, 0xf3, 0xfffffffe, 0x5, 0x0, 0xe22, 0x67, 0x7, 0x0, 0x6, 0x2, 0x1, 0x1, 0x9, 0x4, 0x4d, 0x0, 0x0, 0x55, 0x8000, 0xfd, 0xfffffff7, 0x9, 0x10001, 0x10000, 0x81e, 0xaaa0, 0x3, 0xc60, 0x88, 0x10a6, 0x8, 0xef9f, 0x7, 0x7fff, 0x5, 0x6, 0x8e8, 0x200, 0x0, 0x7ff, 0x0, 0x3, 0x100, 0x1, 0x2, 0x2, 0x0, 0x6, 0x0, 0x5cb6, 0x5, 0x0, 0x7e64, 0x0, 0x3, 0x5, 0x9, 0x254, 0xb86, 0x1ab2e81, 0x30ba, 0xb772, 0xd, 0x6, 0x5, 0x8000, 0x0, 0x0, 0x1, 0x2, 0x67db375a, 0x7fff, 0x80000001, 0x4, 0x9, 0x5, 0x8, 0x3, 0xb00e, 0xf0b, 0x833, 0x5b, 0x3, 0x40, 0x80000001, 0xb, 0x4, 0x2, 0x0, 0x9, 0xf, 0x6, 0x200, 0x1, 0x5, 0x6, 0x7, 0x1ff, 0x8, 0x18, 0xc90, 0x6, 0x0, 0x8, 0x9, 0x800, 0x3, 0x7, 0x1000, 0xc, 0x6, 0x7, 0xfff, 0x9, 0x7fff8000, 0x1, 0xff800000, 0xca, 0x6, 0x3, 0x2, 0x8, 0x5, 0x5, 0xfffffffe, 0x10001, 0x400, 0x3, 0xffffffae, 0x4, 0x3, 0x7, 0x2, 0x9, 0xfffffbff, 0x0, 0x0, 0x4, 0x4, 0x3, 0x5, 0x7, 0x0, 0x1, 0x7, 0x8, 0x7, 0x5, 0x5, 0x404, 0x8, 0x7, 0x9, 0x5, 0x4d1, 0x6, 0x80000000, 0x5, 0x9f, 0x4, 0xfffffff8, 0x7ff, 0x2, 0x40000000, 0xc3, 0xa293, 0x2, 0x9, 0xd, 0x8, 0x3, 0x1fed, 0x8, 0x1, 0x9, 0x3, 0x1, 0xb0, 0x5, 0x42d, 0xfffffff9, 0x4, 0x8001, 0x51, 0x80, 0x6, 0x6, 0x100, 0x0, 0x7, 0x93dd, 0x6, 0x13, 0x81, 0x8, 0x81, 0x2b, 0x0, 0x5, 0x2, 0x2, 0xc3c, 0x4, 0x2, 0x9, 0x4, 0x6, 0x2, 0x8, 0x2, 0x3b, 0x5, 0x0, 0x5, 0x6, 0xf, 0x37, 0xffff, 0xb9, 0xca12, 0x324bc677, 0x0, 0x9, 0xffff, 0xf5, 0x7ff, 0x40, 0x101, 0x0, 0x8, 0x400, 0xbd, 0x0, 0x5, 0x1, 0x3, 0x80, 0x800, 0x4, 0x7f, 0x1, 0x8, 0x7, 0x2, 0x0, 0x6, 0xfffffffa, 0x8, 0xff6, 0x8000000, 0x9, 0x6, 0x8, 0x6, 0x0, 0x4, 0x5, 0x4, 0x0, 0x138a, 0x0, 0x7f, 0x0, 0xfffffff8, 0x1, 0x0, 0x6, 0x2, 0x6, 0x8f, 0x5, 0x3a, 0x8, 0xc0, 0x6a3b, 0x2, 0xffffff86, 0x35, 0x2, 0x8, 0x4, 0xa, 0x2, 0x1, 0x7f000, 0x8, 0x449, 0x9, 0x200, 0x8, 0x86, 0x4, 0x800, 0x4, 0xffff, 0x8, 0x2, 0x5, 0x9, 0x200, 0x6, 0x67, 0xffffffff, 0xfff, 0x3, 0x8, 0x8000, 0x2, 0x12a, 0x8, 0x6, 0x8, 0x25, 0x5, 0x38, 0x5, 0x8, 0x4, 0x39, 0x9745, 0xa2a, 0x81, 0x7, 0x6, 0x4, 0x4, 0xfffffff7, 0x516f, 0x8, 0x1, 0x400, 0x3ff, 0x360, 0x2b0c2d27, 0x0, 0x2, 0x101, 0x12, 0x3, 0xdea, 0x3, 0x6a, 0x1ff, 0x2, 0x6, 0xfffffff8, 0x8001, 0x5, 0x401, 0x2, 0x2, 0x0, 0x1, 0x0, 0x200, 0x10, 0x9, 0x9, 0x3, 0x3, 0x1, 0x3, 0xd, 0x2e0, 0x401, 0x8000, 0x0, 0xae, 0x4, 0x4, 0x6, 0x9f58, 0x9, 0x8, 0x1, 0x2, 0x9, 0x8, 0x2, 0x9, 0x2, 0x20, 0x4, 0xf, 0x401, 0x1, 0x401, 0x3, 0x0, 0x3, 0xc, 0x800, 0x28000000, 0x3, 0x5af9, 0x0, 0xb6c, 0x8, 0xb907, 0x4, 0x7, 0xffff2d21, 0x485, 0x1000, 0x6, 0x4, 0x1, 0x81, 0x2, 0xbd1e, 0x6, 0x33, 0xd, 0x80, 0x8, 0xf9, 0x7fffffff, 0x10001, 0x11, 0x1, 0xe, 0x0, 0x4, 0x9, 0xffffffff, 0x7, 0x9, 0x5, 0x7f1f, 0x7, 0x7, 0x8, 0x3, 0x7, 0xc, 0x7, 0x3, 0x0, 0x2, 0x40, 0xd, 0x9, 0x9, 0x200, 0x40, 0x31cc, 0xffff56d2, 0x20000000, 0xfff, 0x9, 0x5, 0x5, 0xfffffff9, 0x0, 0xff, 0x100, 0x3, 0x6, 0x0, 0x8b, 0x200, 0x80, 0x2, 0xffff, 0x8001, 0xd8c7378, 0x1, 0x4, 0x0, 0x5, 0x3, 0x3, 0x1, 0xdc5e, 0x0, 0x4, 0x3b, 0xffff, 0x1, 0xffffffff, 0xffff, 0x1, 0x400, 0x0, 0x2, 0x5, 0x1000, 0x8000, 0xfffffeff, 0x620a, 0x5, 0x2, 0x0, 0x8, 0x4, 0xdc, 0x2, 0xe, 0x7, 0x140000, 0xfffffff7, 0x1ff, 0x0, 0xb, 0xfd, 0xdd18, 0x0, 0x1, 0x40, 0x5, 0x7c43, 0x4, 0x2c, 0xffff, 0x8, 0x6, 0x200, 0x9, 0xffff, 0x9f, 0x6, 0x3, 0x100, 0x2, 0x9, 0x2, 0x9, 0x1, 0x100, 0x7, 0x5, 0xe, 0x24, 0x8001, 0x6, 0x8000, 0x3, 0xf2, 0x2, 0x1, 0x10001, 0xdeca, 0x4, 0xea, 0x6, 0x3, 0x8, 0x7ff, 0x9, 0x0, 0x8, 0x5b, 0x9, 0x4, 0xff, 0xbf02, 0x2e90a212, 0x40000c, 0x8, 0x20000000, 0x6, 0xffff, 0xfffff801, 0x2], 0x2, 0x400, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000b00)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x16b8c5b5213a03b5}) executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x2, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x298) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=35s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 24, 2, 2, 19, 1, 24, 30, 5, 10, 2, 28, 5, 6, 4, 5, 30, 30, 9, 4, 14, 2] detailed listing: executing program 0: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) unshare(0x22020600) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, &(0x7f00000025c0)=""/102398, &(0x7f000001b5c0)=0x18ffe) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0xffbffff7, 0xffffffff, 0x1}, 0x10) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000fd3f0000000000000900000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f0000000400), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000440)={0x20000014}) epoll_wait(r4, &(0x7f0000000480)=[{}], 0x1, 0x400) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/4100, 0x1004) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x4000040) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000ac0)={0x8cb, "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"}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000240)=0x1002, 0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000002000000d00000000000f00183400000a180500000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000440)={0x0, 0xf, 0x1, "ed"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000001080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x8, 0x24200) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, &(0x7f00000002c0)={0x20, 0x22, 0xeb, {0xeb, 0x21, "5669c367224f441d849f1dc874d6981fdf93c15d2c92ff32d5cc10f4adc572432a2d87ff04cd40d57621525e8808ff4f47dbb374b19616cd22b818503783d70c0071e0083309d691c82459445b4ae80b0da4c02db4abd9286c524ddbca6d6902f01a44fc02971bf57631066ba294f2ad304afc6dcfe7a3395235ee52a3c0cc447f29cad6e5a06e94719807cf01db62e0157bd977d8eeef95e90c88be3c9a09df823b40245d4e6de5c154d31a6482c244bfc244ab8237efebb27ea38d697ba9c9a671622286d7a1acf3abd4b25aa989f8e5bb8308ea55ad48a68637d7a10773f11c45668ebbfd6972ad"}}, &(0x7f0000000480)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "66fb9b8b4c0742e9f2ccf197843e5b0e385a48bc30bc65f886595bf3aaba89f860ffe0745abb36f20358517ecde72926e5aa1f38bef760a2612a0378360eaff5e797b44ed498a79d088dce469569bb006830f5bb8b11c1907f3ec1afc0e678cf4b39d8efac4c45e0579d49ff14935807bc9ceb43cd0e352ef681cd1a7b45c9e0fcb7f813b730e622688c1fcf1c7da0403a52cd4aed74b53b2abf76f17847224be73a69cbf2e89c78462133be6a9909b9d88a7dafbe96b3aa8cb5117624fef455bcce97f9d22446a214a63e044bbd0af4964e60bc6782"}}}, &(0x7f0000000740)={0x2c, &(0x7f00000005c0)={0x0, 0x30, 0x26, "bb36fefcf5796d5c2c0b06284bfc87f7cde617e7e236fc6b3d6166c8ee7c1237690c9ce40a8d"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000006c0)={0xc0, 0x5, 0x6, "2ea444361736"}, &(0x7f0000000700)={0x40, 0x5, 0x5, "5e75c73377"}}) syz_usb_control_io$printer(r0, 0x0, 0x0) executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000ff8000000000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000030000000000000400000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) executing program 2: symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00') (async) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0xe00008da) (async, rerun: 32) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./bus\x00') (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x40) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480), 0x140, 0x0) r3 = dup(r2) read(r3, &(0x7f00000004c0)=""/189, 0xbd) fadvise64(r3, 0x3, 0x4000000005, 0x4) (async, rerun: 32) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)=0x20000) (async, rerun: 32) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000280)={0x101, 0x3, 0xfd}) (async) ioctl$MEMREAD(r1, 0xc0404d1a, &(0x7f0000000440)={0x8, 0x63, 0xd7, &(0x7f00000002c0)=""/99, &(0x7f0000000340)=""/215, 0x1, '\x00', {0xc3, 0x886, 0x55}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x42) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x3) executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) executing program 2: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) unshare(0x22020600) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, &(0x7f00000025c0)=""/102398, &(0x7f000001b5c0)=0x18ffe) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0xffbffff7, 0xffffffff, 0x1}, 0x10) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000fd3f0000000000000900000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000003c0), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000400), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000440)={0x20000014}) epoll_wait(r2, &(0x7f0000000480)=[{}], 0x1, 0x400) ppoll(&(0x7f00000004c0)=[{r2, 0x401}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$kcm(0x10, 0x2, 0x4) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/4100, 0x1004) executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) keyctl$dh_compute(0x17, &(0x7f0000000980), 0x0, 0x0, &(0x7f00000009c0)={0x0}) r3 = syz_open_dev$sndctrl(&(0x7f0000000a00), 0x84, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0485510, &(0x7f0000000a40)={0x0, 0x1, 0x1, 0x0, &(0x7f0000000ac0)=[{}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000b40)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0x1, 0x0, 0x2, 0x4, 0x0, 0x7, 0x8004, 0xa, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000b80)='X', 0x34000, 0x0, &(0x7f0000000bc0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000c00)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000cc0)={{0x0, 0xeeee0000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x5, 0x9, 0x10}, {0xffff1000, 0x200000, 0xd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x7}, {0x2000, 0x5000, 0xc, 0xff, 0x4, 0x4, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6, 0xfc}, {0x6000, 0xfffef001, 0x9, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x83}, {0xdddd0000, 0xb000, 0x0, 0x35, 0x3, 0x0, 0x42, 0x0, 0x0, 0x0, 0x3}, {0xeeef0000, 0xe6e31000, 0x8, 0xfe, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x30000, 0x2000, 0xf, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26, 0x0, 0x0, 0x1}, {0x80a0000, 0x807}, {0x7000}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0xfffffffffffffffc, 0x0, 0x0, [0x0, 0xe4, 0x1, 0x40]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000740), 0x8, 0x10, &(0x7f0000000780), 0x3f}, 0x16) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r5) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000e40)={'syzkaller0\x00', 0x1}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=@newtfilter={0x74, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1, 0xf}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xf, 0x800, 0x5, 0xf738, {0xb, 0x2, 0x0, 0x2, 0x200, 0x1}, {0x2, 0x1, 0x1, 0x0, 0xffff}, 0xd8, 0xeb}}]}]}}]}, 0x74}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000840)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x8004) executing program 4: unshare(0x6020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000002c0)={0x3, 0x0, 0xfffff3a2}) executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80001001300100000000000fbdbdf25fc000000000000000000000000000000fc000000000000000000000000000001000000044e2400000a0060203b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0xfffffffffffffdee, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x40000001}, 0x24004000) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000ffffff8000000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc01000000000000000080ff00000000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) (async) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001740)={{r0}, r1, 0x18, @inherit={0x98, &(0x7f00000003c0)={0x1, 0xa, 0xef, 0x3, {0x0, 0x7, 0x1, 0x8000000000000000, 0x6}, [0x48c9, 0x4, 0xc010, 0xfffffffffffffffc, 0x1000, 0x5c8d, 0x9, 0x8001, 0x1, 0xff]}}, @subvolid=0x2}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001740)={{r0}, r1, 0x18, @inherit={0x98, &(0x7f00000003c0)={0x1, 0xa, 0xef, 0x3, {0x0, 0x7, 0x1, 0x8000000000000000, 0x6}, [0x48c9, 0x4, 0xc010, 0xfffffffffffffffc, 0x1000, 0x5c8d, 0x9, 0x8001, 0x1, 0xff]}}, @subvolid=0x2}) poll(0x0, 0x0, 0x2) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) (async) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044402, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000001c0)={0x0, 0x0, 0x10001, 0x5}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000000700)={0xc, {"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", 0x1000}}, 0x104a) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0002003c0001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010400028005000100010000003c000380"], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000003f0026012bbd700000000000117c00000400fc800c00018055fd0400", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000140007000001000000000000000000000000000100009d00", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) executing program 0: syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8a16, 0x3a10, 0x3, 0x31d}, &(0x7f0000000500), &(0x7f0000000580), &(0x7f0000000180)) syz_clone(0x100111, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) r0 = eventfd(0x0) io_submit(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xc2, r0, &(0x7f0000000140)="0100fd6400000000", 0x8, 0x36, 0x0, 0x0, r0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001701000001e500000000d8936e75a545998a2db3c561ef65a300000000000018000000000000001701000004000000fffbffff00000000"], 0x30, 0x40}], 0x1, 0x40800) executing program 6: unshare(0x6020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000002c0)={0x3, 0x0, 0xfffff3a2}) executing program 6: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) read(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r9, 0x80000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000cc0)) lseek(r0, 0x0, 0x3) r10 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) r11 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x10, 0x81, 0x80, 0x4}, {0x9, 0x5, 0xe, 0x2, 0x10, 0xd, 0xa, 0x9}, {0x9, 0x5, 0x9, 0x3, 0x20, 0x0, 0x0, 0xfd}}}}}}]}}, 0x0) syz_usb_ep_write(r11, 0x7, 0x9, &(0x7f0000000300)="39151cdff086a4bbcb") executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r2, @ANYBLOB="5c005a80140001800500070001000000050006000100000044000380120001000c"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, <> 01, 0x400, 0x2, 0x5, 0x80, 0x400, 0x5, 0x9, 0x80000001, 0x10001, 0x9, 0x4, 0x8000, 0x7, 0x1, 0x7, 0xffff8000, 0xfffffff7, 0x5, 0x6, 0x0, 0x1, 0xfffffffc, 0x7, 0x7ff, 0x8000, 0x4, 0x2, 0x6, 0x0, 0x2, 0x2, 0x86b, 0x3, 0x5, 0x65c8049d, 0x8, 0x8, 0x6, 0x2, 0xe1, 0x9, 0x6, 0x4, 0x0, 0x3, 0x5, 0x101, 0x9, 0x3, 0x0, 0x0, 0x2, 0x3, 0x3, 0x80000001, 0x5664, 0x80, 0x75, 0x3, 0x8, 0xee, 0x8000, 0x1, 0x10000, 0x7f, 0xa4c, 0x5, 0x80, 0xb, 0x8, 0xb, 0xd, 0xfffffffe, 0x9, 0x1432, 0x0, 0x0, 0x6, 0x1, 0xdb71, 0xffff, 0x4, 0x101, 0x3, 0xc3b9, 0x1, 0x2, 0xb1e4, 0x9, 0x3, 0xe, 0x80000001, 0x8, 0x401, 0x1, 0x7, 0x2, 0x385, 0xde, 0xab84, 0xde, 0x8001, 0x7, 0x7, 0x8000, 0x9, 0x2, 0x2, 0x9, 0x2, 0x5, 0x9, 0x0, 0x6, 0x2, 0x5, 0x81, 0x1000, 0x7, 0x4, 0x40, 0x2, 0x8, 0x10000, 0x9, 0xfffffffe, 0x2, 0xfffffffb, 0x5, 0x1, 0x1, 0x10, 0x2549, 0x5, 0x200, 0x0, 0xeb2, 0x3, 0x2, 0x2, 0xc, 0x6, 0x3ff, 0xffffe3dc, 0x2, 0x9, 0x8, 0xffffdd5e, 0x80, 0xfff, 0x2, 0x1, 0x0, 0x200, 0xe48d, 0xfffff8ee, 0xb1, 0x81, 0xeb, 0x3, 0x0, 0x1, 0x80000001, 0x5, 0x1ff, 0x7, 0x7, 0x5, 0x2, 0x6a38bf39, 0x6, 0x7ff, 0x1bb800, 0x7, 0x5, 0x4, 0x3ff, 0x81, 0x8000, 0x7f, 0x66, 0xffffffff, 0x80, 0x9, 0x0, 0x226a, 0x8, 0x4, 0x790, 0x0, 0xffff8001, 0x8f, 0xbbf, 0x5, 0xffff, 0x9, 0xb83, 0x5, 0x0, 0x6, 0x4, 0x3b, 0x2, 0x8001, 0x8, 0xb9e, 0x6, 0x3, 0x0, 0x9, 0x6, 0x3, 0xfffffff9, 0x7ff, 0x100, 0x0, 0x81, 0x3ff, 0x8, 0x400, 0x9, 0x4, 0x7, 0x8, 0x6, 0x11, 0x1, 0xfffffffd, 0x5, 0xe7cb, 0x3, 0x5, 0xc, 0xff, 0x400, 0x4, 0xb30, 0xe4, 0x7fffffff, 0x9, 0x7, 0xa, 0x1afa, 0x2, 0x6, 0x2, 0x6, 0x1, 0x5, 0x9, 0x2, 0x8001, 0xe, 0x1, 0xfffffffe, 0x2, 0x0, 0x7, 0x66, 0xfffffffa, 0x5, 0x6, 0xe, 0x4, 0x2, 0xe38, 0x3, 0x80, 0xdb23, 0x1, 0x6456, 0x6000000, 0x8, 0xffff, 0x9, 0x0, 0x8d, 0x56, 0xb, 0x2, 0x4, 0x7ff, 0x8, 0x0, 0x9, 0x2f, 0x7, 0x1, 0x1, 0x3, 0x4, 0x4, 0x80, 0x4, 0x9, 0x3, 0xffffff5b, 0x5, 0x48f, 0x7, 0x0, 0xb753, 0xb7a6, 0xfff, 0x2, 0x9, 0x9, 0x6, 0x3, 0x4, 0x20, 0xe223, 0x80, 0x5, 0xfffffffe, 0x1, 0xfffffffb, 0x100, 0x3, 0x115d, 0xfffffff9, 0x5, 0x2, 0x5, 0x7, 0x6236a69d, 0x1, 0xffffffff, 0x0, 0x0, 0x1, 0x8c, 0x4, 0x8, 0xc, 0x77, 0x9, 0xf, 0x6, 0x1d7, 0x6, 0x9, 0xffffffff, 0x7, 0xf2, 0x5, 0x9, 0x3, 0x3, 0x9, 0x0, 0xc, 0x1, 0x3, 0x1, 0x2, 0x3, 0x1, 0xe0, 0x6, 0x9, 0x9, 0x7, 0x7fff, 0x80000001, 0xa429, 0x6, 0xf20, 0x7fffffff, 0x8, 0x2, 0x0, 0x100, 0x6, 0x7, 0x7, 0x6, 0x7, 0x6, 0x8, 0x8, 0x6, 0x7, 0x0, 0xc06, 0x9, 0xf0, 0x6, 0x7ff, 0xe00, 0x12a4, 0x0, 0x3, 0x8ae0, 0xffffffe7, 0x2, 0x4, 0x9, 0x0, 0x80, 0x10001, 0x7, 0x4, 0x8, 0x4, 0x5, 0x4, 0x4, 0x4, 0xf3, 0xfffffffe, 0x5, 0x0, 0xe22, 0x67, 0x7, 0x0, 0x6, 0x2, 0x1, 0x1, 0x9, 0x4, 0x4d, 0x0, 0x0, 0x55, 0x8000, 0xfd, 0xfffffff7, 0x9, 0x10001, 0x10000, 0x81e, 0xaaa0, 0x3, 0xc60, 0x88, 0x10a6, 0x8, 0xef9f, 0x7, 0x7fff, 0x5, 0x6, 0x8e8, 0x200, 0x0, 0x7ff, 0x0, 0x3, 0x100, 0x1, 0x2, 0x2, 0x0, 0x6, 0x0, 0x5cb6, 0x5, 0x0, 0x7e64, 0x0, 0x3, 0x5, 0x9, 0x254, 0xb86, 0x1ab2e81, 0x30ba, 0xb772, 0xd, 0x6, 0x5, 0x8000, 0x0, 0x0, 0x1, 0x2, 0x67db375a, 0x7fff, 0x80000001, 0x4, 0x9, 0x5, 0x8, 0x3, 0xb00e, 0xf0b, 0x833, 0x5b, 0x3, 0x40, 0x80000001, 0xb, 0x4, 0x2, 0x0, 0x9, 0xf, 0x6, 0x200, 0x1, 0x5, 0x6, 0x7, 0x1ff, 0x8, 0x18, 0xc90, 0x6, 0x0, 0x8, 0x9, 0x800, 0x3, 0x7, 0x1000, 0xc, 0x6, 0x7, 0xfff, 0x9, 0x7fff8000, 0x1, 0xff800000, 0xca, 0x6, 0x3, 0x2, 0x8, 0x5, 0x5, 0xfffffffe, 0x10001, 0x400, 0x3, 0xffffffae, 0x4, 0x3, 0x7, 0x2, 0x9, 0xfffffbff, 0x0, 0x0, 0x4, 0x4, 0x3, 0x5, 0x7, 0x0, 0x1, 0x7, 0x8, 0x7, 0x5, 0x5, 0x404, 0x8, 0x7, 0x9, 0x5, 0x4d1, 0x6, 0x80000000, 0x5, 0x9f, 0x4, 0xfffffff8, 0x7ff, 0x2, 0x40000000, 0xc3, 0xa293, 0x2, 0x9, 0xd, 0x8, 0x3, 0x1fed, 0x8, 0x1, 0x9, 0x3, 0x1, 0xb0, 0x5, 0x42d, 0xfffffff9, 0x4, 0x8001, 0x51, 0x80, 0x6, 0x6, 0x100, 0x0, 0x7, 0x93dd, 0x6, 0x13, 0x81, 0x8, 0x81, 0x2b, 0x0, 0x5, 0x2, 0x2, 0xc3c, 0x4, 0x2, 0x9, 0x4, 0x6, 0x2, 0x8, 0x2, 0x3b, 0x5, 0x0, 0x5, 0x6, 0xf, 0x37, 0xffff, 0xb9, 0xca12, 0x324bc677, 0x0, 0x9, 0xffff, 0xf5, 0x7ff, 0x40, 0x101, 0x0, 0x8, 0x400, 0xbd, 0x0, 0x5, 0x1, 0x3, 0x80, 0x800, 0x4, 0x7f, 0x1, 0x8, 0x7, 0x2, 0x0, 0x6, 0xfffffffa, 0x8, 0xff6, 0x8000000, 0x9, 0x6, 0x8, 0x6, 0x0, 0x4, 0x5, 0x4, 0x0, 0x138a, 0x0, 0x7f, 0x0, 0xfffffff8, 0x1, 0x0, 0x6, 0x2, 0x6, 0x8f, 0x5, 0x3a, 0x8, 0xc0, 0x6a3b, 0x2, 0xffffff86, 0x35, 0x2, 0x8, 0x4, 0xa, 0x2, 0x1, 0x7f000, 0x8, 0x449, 0x9, 0x200, 0x8, 0x86, 0x4, 0x800, 0x4, 0xffff, 0x8, 0x2, 0x5, 0x9, 0x200, 0x6, 0x67, 0xffffffff, 0xfff, 0x3, 0x8, 0x8000, 0x2, 0x12a, 0x8, 0x6, 0x8, 0x25, 0x5, 0x38, 0x5, 0x8, 0x4, 0x39, 0x9745, 0xa2a, 0x81, 0x7, 0x6, 0x4, 0x4, 0xfffffff7, 0x516f, 0x8, 0x1, 0x400, 0x3ff, 0x360, 0x2b0c2d27, 0x0, 0x2, 0x101, 0x12, 0x3, 0xdea, 0x3, 0x6a, 0x1ff, 0x2, 0x6, 0xfffffff8, 0x8001, 0x5, 0x401, 0x2, 0x2, 0x0, 0x1, 0x0, 0x200, 0x10, 0x9, 0x9, 0x3, 0x3, 0x1, 0x3, 0xd, 0x2e0, 0x401, 0x8000, 0x0, 0xae, 0x4, 0x4, 0x6, 0x9f58, 0x9, 0x8, 0x1, 0x2, 0x9, 0x8, 0x2, 0x9, 0x2, 0x20, 0x4, 0xf, 0x401, 0x1, 0x401, 0x3, 0x0, 0x3, 0xc, 0x800, 0x28000000, 0x3, 0x5af9, 0x0, 0xb6c, 0x8, 0xb907, 0x4, 0x7, 0xffff2d21, 0x485, 0x1000, 0x6, 0x4, 0x1, 0x81, 0x2, 0xbd1e, 0x6, 0x33, 0xd, 0x80, 0x8, 0xf9, 0x7fffffff, 0x10001, 0x11, 0x1, 0xe, 0x0, 0x4, 0x9, 0xffffffff, 0x7, 0x9, 0x5, 0x7f1f, 0x7, 0x7, 0x8, 0x3, 0x7, 0xc, 0x7, 0x3, 0x0, 0x2, 0x40, 0xd, 0x9, 0x9, 0x200, 0x40, 0x31cc, 0xffff56d2, 0x20000000, 0xfff, 0x9, 0x5, 0x5, 0xfffffff9, 0x0, 0xff, 0x100, 0x3, 0x6, 0x0, 0x8b, 0x200, 0x80, 0x2, 0xffff, 0x8001, 0xd8c7378, 0x1, 0x4, 0x0, 0x5, 0x3, 0x3, 0x1, 0xdc5e, 0x0, 0x4, 0x3b, 0xffff, 0x1, 0xffffffff, 0xffff, 0x1, 0x400, 0x0, 0x2, 0x5, 0x1000, 0x8000, 0xfffffeff, 0x620a, 0x5, 0x2, 0x0, 0x8, 0x4, 0xdc, 0x2, 0xe, 0x7, 0x140000, 0xfffffff7, 0x1ff, 0x0, 0xb, 0xfd, 0xdd18, 0x0, 0x1, 0x40, 0x5, 0x7c43, 0x4, 0x2c, 0xffff, 0x8, 0x6, 0x200, 0x9, 0xffff, 0x9f, 0x6, 0x3, 0x100, 0x2, 0x9, 0x2, 0x9, 0x1, 0x100, 0x7, 0x5, 0xe, 0x24, 0x8001, 0x6, 0x8000, 0x3, 0xf2, 0x2, 0x1, 0x10001, 0xdeca, 0x4, 0xea, 0x6, 0x3, 0x8, 0x7ff, 0x9, 0x0, 0x8, 0x5b, 0x9, 0x4, 0xff, 0xbf02, 0x2e90a212, 0x40000c, 0x8, 0x20000000, 0x6, 0xffff, 0xfffff801, 0x2], 0x2, 0x400, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000b00)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x16b8c5b5213a03b5}) executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x2, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000fcffffff0200000005000000030000000a01766c616e30000000000000000000000076657468305f746f5f626f6e6400000064766d7270300000000000000000000064766d727030000000000000000000000000000000000000ffff00000180c200000100ffffffffff000070000000aa000000d80000006d61726b000000000000000000000000000000000000000000000000000000001000000000000000e0ffffff00000000efffffff00000000434c41535349465900000000000000000000000000000000000000000000000008000000000000000f0000000000000003000000000000000a016d6163766c616e30000000000000000070696d3672656700000000000000000073797a6b616c6c65723000000000000064756d6d7930000000000000000000000180c20000000c00000000ffffffffffffffffff0000ff0000007000000070000000b80000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a310000000000000000000000000402000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000feffffff00000000"]}, 0x298) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 24, 2, 2, 19, 1, 24, 30, 5, 10, 2, 28, 5, 6, 4, 5, 30, 30, 9, 4, 14, 2, 1, 2, 23, 4] detailed listing: executing program 0: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) unshare(0x22020600) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, &(0x7f00000025c0)=""/102398, &(0x7f000001b5c0)=0x18ffe) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0xffbffff7, 0xffffffff, 0x1}, 0x10) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000fd3f0000000000000900000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f0000000400), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000440)={0x20000014}) epoll_wait(r4, &(0x7f0000000480)=[{}], 0x1, 0x400) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/4100, 0x1004) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x4000040) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000ac0)={0x8cb, "761f41c1eff2835da5f44a67f54aeb425a8636c5ff3769bc70e6769f848f30df00f4775848257f32ace0aab77ac284df1f6a8ebfeed7d6f59916e7a3fb81cb1e8e52815b505fb9006afea6183466f01036c2663302a576f007980274fe17b899df2c946034fb815244f6b0b48321ec0c9b1b686b21d2c5448ae08057e60297761d4d11084f499b5d8014c77d7ca51ac0dee03f7e15da38323401e68b2e014502a09184142db66d4a4558d58886532e48222e7bb9cb4a028441553080041187e21df9552933ca8baf1e4c01be086ef35c7bd6230c4afe9f625bd78f052ac1cb3785e43409dd4ddd17f59cd5c39c6779ef9939156a0283714f514517df6a3cc79113c75bb7c783bfe0cb6c9e3f554acb2d58ec012452494b98f8f9e8cc178279b089eb91db93b7261367ddf201664278e80eebc1a9124cb5fa1b0d0b734e84b4fa1d4e83df588ed81ded2c697f7b0d7bf3e7fd6ea778ca1efd28dbf6feb532fe8dd5edb12bde258bb71692e895a05ee39f76fa764173c1944616e32c0cedede3b1c0c8df0d22178060a776f85c170d705018a13d79413cd82e238f1d3672d1c1682341a9d77d1799956dac97cac6c7eb47c5fe4002ddda1abf0b05cd21a0c3c63d4ae836e35d308baeedecef4be91d54ee576340112ecf28a5599e69a2d7f39fd3bc92903b99533376b4f65043659a3ef2abfff96bba69dd72e8e4465f6d2478f33d5543b8b43fafe30f4eeff97b3a30b5ef23a6f821fa4345aa953e0430cc65bc9cde2a26f558a2b7285d49d374f34be2f279a34d8c41a0d0084c28a64721d5f6c9e1038dc561c4f66c636e96578e8f37addf5eb611efcc05d5d9bd7e1e31b4f11229bf5e9afb27c3f27343eb48a07458130bb2b06247e2fb9d8c326d24d03de494ed53bf67f3f34127c09ba7ce72cd031b4e87cde5f80d1a778e19f4dde22cffa399fd8dd8fa3d432ccaa7529d63e1f82a8975ac7df407a12e6f2196e27e60ca745a5e75fe5e2c5fb6bcba51438dd06258b25457b52274168f6e44d64d8093723b696b905aca2ca8b9211ce648f1b47eb4fb11a616d28567789a827f44ab9ddf833013272228b422cbbd6ccdb39c6c9a21b80f0e02b7c3f03840cff30b021c4dae454dd9c2ada96191ab5346722429e192c0eb752595bbfe8eb76274953f2bd1c72782819a6958966cde10c40dc1106f2fde4b061137b0153b8443d9d21f1fa2fe0996263ad0d09872731913c8ea5f0cde134e11a7e59320bdda405a6ec251fd44a4e74668895b4ad9908e99af9db94ccf5697650b1cee0e4e3333ea2c826cea519f2de05bbe16fb47e10d940259d614fc12417657f6f7661e23c85c859bf0b7e5dbb553d108ab1d341705c1f5c61ed7c5eb9cd23693a54342e3c8a73e273e902a37c0766e36831b8c87ca5be3bed1ab1378e2accd32f84f38d7578fb7095ad8bf5dd38fbdaf68f214106548462ff363ddc432f0013ce7c02899df0d907ad9b682579c6c3f8e65b1dd288cb81060f174b0ef567ca8ea530300fb4e2a3a12f8e57322fb84c8580b6ff4dffac80fd332d7d0c1933dea78dc417ab33e7ee885b44ec473960046c11ac0642b7dbe1303d40fc6a401b7207d157a2eb0774ae02ea6fceb093a436a499cbb7d07aeb44eb9a44377e8f27387095964970136d6ba8593822ed3e35cc6cf125a72bdca8b79bbb919cab0553fcf28c3ecd5045f2cc6b64be93dbb70db717fbae9d9610e11fcf9f404c2978c189bb40449aa6784299133abb3c418aa03c52ad4cc04de8b97190c2b5adeb104a56f7c51faaaa57ca83e0fbd74451106baa70b752419df2af4f29902846235095183c451966235a748c7a7fa67bd3c39304e2e9b9e7ce3ea229a60dc3269d7ae528fb4a4f42021feda39a3d22cdd1c7fb146d5930c241de2961cef90ace185c812564ebf840a775e3f73acb3b507e4e8b6659f9ba8fee780f21a551fd607d48299b709b25201341e88c130508354137ec365cadfa72681f7ea6e090f38bcd67f5fd925482b73e07b43f4798a6c6afa698ddde0a0c543a7c64397cbf4c36179d9f59377e54edfb5979daa985eb82360d68f10a0c0355fee18281626c329fd8bcd18c0059f78c419bc7dd34df738a8aadef5a1f7feddd9390034c74a807b095c7eb51fb43823ff38c9b71a85f77df90c916063867798dbb83a7e011423ba8686875eb19e719448e23caf90e350e7601788db592fe286ae68f69c0fe67ec0535a0e70c3f371de82458a2949d9f10669294e1d8812d0317ceb7ce2980b4fe6a5bfc94de43e24cbe47cad99a076c7500ab51485c1bf41d3946fc0a56f660f907939d4e9f24d5fc442def5116cf40ba22da340c1271dbb8f7a8eed2fe8b2a40172ab8f27aeb8cddfa375ac31fc66ee835ab85b48b8e4953d0a6ea88a1726515b2dfe375405ba221b798125afc94c1ab936f87a1fb6ad38497a5c74aaa07fa8245d2418f70d251beee6d739f856bd22ae3337cf38625dc11c7f72ce0a3678916f209b1d66fefa5b95df0f0fbab95acdae4eedb84585320eaae1c9c34273d49fc12d4f4c618927724c9d3ae400344cfd6176f761f9dd6c884af556f339a984e7137fec2f24905e788ded329288d0ba9a43d9fd5dd49a98c076bd0ddca4357433d0b86ecfbd99d90c7ad6f893baf1567f94f7ac7a70585a633eab0e709f32a2fb2a851406974a1355a4093bb8874c69cecdccb36a23178eecdba72c0090724826747adcf6cf76cc11dcb1796826d3badf811df25cd6fc41c5f2fd850cc9218c13d00823cab29678689fb469ad1c37cadc583f15b49df3a1622102f9744004e822218db891322968003a7e98e535daf002fc38dbe87dc1eccd4270ddc1a70166f5de85b297a85daa8934fdfab6c284c1e4fc698a28fb479fc09f3ca653a786ae1d2e2727e24cbd6a81ee6078666ddbd18cc22203df5c02495cd13bb563fa26f876faed440f22ff7ce44d64b2d3c787a0bd90bd5de2d11b8e3c52c6ed6759d25035a39f57b37d88d2bbc0ae86c4f7292df22ddc4acf33441172e832117694cf1510061a7f0a2b0fc9eeab20e7bd0083838a5c410ef060c72d99040c00d8c76eca2a2127db232e17896d6e2032554a69634f909ec8fa7ee246fd8dc72e5b003122a08541e73f4114210da96eaa1fad40e9dd1e851ca88c71d84cfd0f740f"}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000240)=0x1002, 0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000002000000d00000000000f00183400000a180500000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000440)={0x0, 0xf, 0x1, "ed"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000001080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x8, 0x24200) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, &(0x7f00000002c0)={0x20, 0x22, 0xeb, {0xeb, 0x21, "5669c367224f441d849f1dc874d6981fdf93c15d2c92ff32d5cc10f4adc572432a2d87ff04cd40d57621525e8808ff4f47dbb374b19616cd22b818503783d70c0071e0083309d691c82459445b4ae80b0da4c02db4abd9286c524ddbca6d6902f01a44fc02971bf57631066ba294f2ad304afc6dcfe7a3395235ee52a3c0cc447f29cad6e5a06e94719807cf01db62e0157bd977d8eeef95e90c88be3c9a09df823b40245d4e6de5c154d31a6482c244bfc244ab8237efebb27ea38d697ba9c9a671622286d7a1acf3abd4b25aa989f8e5bb8308ea55ad48a68637d7a10773f11c45668ebbfd6972ad"}}, &(0x7f0000000480)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "66fb9b8b4c0742e9f2ccf197843e5b0e385a48bc30bc65f886595bf3aaba89f860ffe0745abb36f20358517ecde72926e5aa1f38bef760a2612a0378360eaff5e797b44ed498a79d088dce469569bb006830f5bb8b11c1907f3ec1afc0e678cf4b39d8efac4c45e0579d49ff14935807bc9ceb43cd0e352ef681cd1a7b45c9e0fcb7f813b730e622688c1fcf1c7da0403a52cd4aed74b53b2abf76f17847224be73a69cbf2e89c78462133be6a9909b9d88a7dafbe96b3aa8cb5117624fef455bcce97f9d22446a214a63e044bbd0af4964e60bc6782"}}}, &(0x7f0000000740)={0x2c, &(0x7f00000005c0)={0x0, 0x30, 0x26, "bb36fefcf5796d5c2c0b06284bfc87f7cde617e7e236fc6b3d6166c8ee7c1237690c9ce40a8d"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000006c0)={0xc0, 0x5, 0x6, "2ea444361736"}, &(0x7f0000000700)={0x40, 0x5, 0x5, "5e75c73377"}}) syz_usb_control_io$printer(r0, 0x0, 0x0) executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000ff8000000000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000030000000000000400000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) executing program 2: symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00') (async) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0xe00008da) (async, rerun: 32) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./bus\x00') (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x40) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480), 0x140, 0x0) r3 = dup(r2) read(r3, &(0x7f00000004c0)=""/189, 0xbd) fadvise64(r3, 0x3, 0x4000000005, 0x4) (async, rerun: 32) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)=0x20000) (async, rerun: 32) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000280)={0x101, 0x3, 0xfd}) (async) ioctl$MEMREAD(r1, 0xc0404d1a, &(0x7f0000000440)={0x8, 0x63, 0xd7, &(0x7f00000002c0)=""/99, &(0x7f0000000340)=""/215, 0x1, '\x00', {0xc3, 0x886, 0x55}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x42) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x3) executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) executing program 2: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) unshare(0x22020600) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, &(0x7f00000025c0)=""/102398, &(0x7f000001b5c0)=0x18ffe) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0xffbffff7, 0xffffffff, 0x1}, 0x10) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000fd3f0000000000000900000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000003c0), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000400), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000440)={0x20000014}) epoll_wait(r2, &(0x7f0000000480)=[{}], 0x1, 0x400) ppoll(&(0x7f00000004c0)=[{r2, 0x401}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$kcm(0x10, 0x2, 0x4) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/4100, 0x1004) executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) keyctl$dh_compute(0x17, &(0x7f0000000980), 0x0, 0x0, &(0x7f00000009c0)={0x0}) r3 = syz_open_dev$sndctrl(&(0x7f0000000a00), 0x84, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0485510, &(0x7f0000000a40)={0x0, 0x1, 0x1, 0x0, &(0x7f0000000ac0)=[{}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000b40)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0x1, 0x0, 0x2, 0x4, 0x0, 0x7, 0x8004, 0xa, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000b80)='X', 0x34000, 0x0, &(0x7f0000000bc0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000c00)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000cc0)={{0x0, 0xeeee0000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x5, 0x9, 0x10}, {0xffff1000, 0x200000, 0xd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x7}, {0x2000, 0x5000, 0xc, 0xff, 0x4, 0x4, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6, 0xfc}, {0x6000, 0xfffef001, 0x9, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x83}, {0xdddd0000, 0xb000, 0x0, 0x35, 0x3, 0x0, 0x42, 0x0, 0x0, 0x0, 0x3}, {0xeeef0000, 0xe6e31000, 0x8, 0xfe, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x30000, 0x2000, 0xf, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26, 0x0, 0x0, 0x1}, {0x80a0000, 0x807}, {0x7000}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0xfffffffffffffffc, 0x0, 0x0, [0x0, 0xe4, 0x1, 0x40]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000740), 0x8, 0x10, &(0x7f0000000780), 0x3f}, 0x16) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r5) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000e40)={'syzkaller0\x00', 0x1}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=@newtfilter={0x74, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1, 0xf}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xf, 0x800, 0x5, 0xf738, {0xb, 0x2, 0x0, 0x2, 0x200, 0x1}, {0x2, 0x1, 0x1, 0x0, 0xffff}, 0xd8, 0xeb}}]}]}}]}, 0x74}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000840)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x8004) executing program 4: unshare(0x6020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000002c0)={0x3, 0x0, 0xfffff3a2}) executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80001001300100000000000fbdbdf25fc000000000000000000000000000000fc000000000000000000000000000001000000044e2400000a0060203b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0xfffffffffffffdee, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x40000001}, 0x24004000) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000ffffff8000000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc01000000000000000080ff00000000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) (async) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001740)={{r0}, r1, 0x18, @inherit={0x98, &(0x7f00000003c0)={0x1, 0xa, 0xef, 0x3, {0x0, 0x7, 0x1, 0x8000000000000000, 0x6}, [0x48c9, 0x4, 0xc010, 0xfffffffffffffffc, 0x1000, 0x5c8d, 0x9, 0x8001, 0x1, 0xff]}}, @subvolid=0x2}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001740)={{r0}, r1, 0x18, @inherit={0x98, &(0x7f00000003c0)={0x1, 0xa, 0xef, 0x3, {0x0, 0x7, 0x1, 0x8000000000000000, 0x6}, [0x48c9, 0x4, 0xc010, 0xfffffffffffffffc, 0x1000, 0x5c8d, 0x9, 0x8001, 0x1, 0xff]}}, @subvolid=0x2}) poll(0x0, 0x0, 0x2) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) (async) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044402, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000001c0)={0x0, 0x0, 0x10001, 0x5}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000000700)={0xc, {"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", 0x1000}}, 0x104a) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0002003c0001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010400028005000100010000003c000380"], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000003f0026012bbd700000000000117c00000400fc800c00018055fd0400", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000140007000001000000000000000000000000000100009d00", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) executing program 0: syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8a16, 0x3a10, 0x3, 0x31d}, &(0x7f0000000500), &(0x7f0000000580), &(0x7f0000000180)) syz_clone(0x100111, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) r0 = eventfd(0x0) io_submit(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xc2, r0, &(0x7f0000000140)="0100fd6400000000", 0x8, 0x36, 0x0, 0x0, r0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001701000001e500000000d8936e75a545998a2db3c561ef65a300000000000018000000000000001701000004000000fffbffff00000000"], 0x30, 0x40}], 0x1, 0x40800) executing program 6: unshare(0x6020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000002c0)={0x3, 0x0, 0xfffff3a2}) executing program 6: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) read(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r9, 0x80000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000cc0)) lseek(r0, 0x0, 0x3) r10 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) r11 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x10, 0x81, 0x80, 0x4}, {0x9, 0x5, 0xe, 0x2, 0x10, 0xd, 0xa, 0x9}, {0x9, 0x5, 0x9, 0x3, 0x20, 0x0, 0x0, 0xfd}}}}}}]}}, 0x0) syz_usb_ep_write(r11, 0x7, 0x9, &(0x7f0000000300)="39151cdff086a4bbcb") executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r2, @ANYBLOB="5c005a80140001800500070001000000050006000100000044000380120001000c"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000000c0)="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") r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0x3}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffe0f, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r8 = socket$inet6(0xa, 0x2, 0x0) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f0000008880), 0x45b, 0x2, 0x0) unshare(0x62020400) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r9, 0x0, 0x5, &(0x7f0000000240)={@loopback, @multicast2, 0xfffb, "66c5aff8a7eb17f1f6cec2e7780795478c84aea31700", 0x96bf, 0x2, 0x7a, 0x6b}, 0x3c) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000000), 0x4) socket(0x10, 0x3, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4001010) executing program 2: madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r0, &(0x7f0000000740)='0', 0x1) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\t/'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000780)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000020a09040000000000000000020000000900010073797a3000000000090001e173797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0x74}, 0x1, 0xf5ffffff}, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x80000000000000a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) epoll_create(0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309180008000a00", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800070008000000062102000100000008000500", @ANYRES16=r0], 0x54}, 0x1, 0x0, 0x5000000, 0x24004845}, 0x8000002) executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000ffffff800000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) executing program 5: r0 = syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000500)=ANY=[@ANYBLOB="120110030000004035120182400001020301090286080000003009080b00010107208c0904000000010120000924010040041d000708240a0001ff23030c240302"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="004e82a3adfc8c4409e6f5030400000004034308"], 0x0, 0x0, 0x0}, 0x0) executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'team0\x00', 0x1}, 0x18) close(0x3) r1 = syz_open_dev$sndpcmc(&(0x7f0000000540), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f00000009c0)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000c40)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1c79, &(0x7f0000000d00)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000e40)=0x7) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000020000008520000004000000184a00000200000000000000000000007c94000010000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r6, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x80}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2f}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x4}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x4880) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000180)) executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001701000001e500000000d8936e75a545998a2db3c561ef65a300000000000018000000000000001701000004000000fffbffff00000000"], 0x30, 0x40}], 0x1, 0x40800) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: too many guilty chunks, aborting single: executing 9 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_icmp_raw-setsockopt$EBT_SO_SET_ENTRIES detailed listing: executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x2, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x298) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$nl_route_sched-ioctl$KVM_CREATE_VM-ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL-socket$nl_generic-syz_usb_connect-setsockopt$IP6T_SO_SET_REPLACE-mprotect-unshare-mmap$IORING_OFF_SQ_RING-socket$inet6_tcp-ioctl$sock_SIOCETHTOOL-sendmsg$nl_generic-prctl$PR_SCHED_CORE-syz_ublk_setup_io_uring-syz_ublk_add_dev-socket$inet6_tcp-syz_open_dev$media-ioctl$MEDIA_IOC_REQUEST_ALLOC-dup-syz_ublk_setup_queues-ioctl$MEMREADOOB-sendmsg$nl_xfrm-syz_io_uring_modify_offsets$flags-sendmsg$nl_route-syz_usb_connect-syz_ublk_add_dev-ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE-ioctl$UFFDIO_REGISTER detailed listing: executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x12, 0x0, {0xc, 0xd}, {0xc, 0x5}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048810}, 0x2000000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f00000005c0)={0xdf, 0x0, 0x80000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x4, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001b80)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0x270, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) mprotect(&(0x7f0000e15000/0x2000)=nil, 0x2000, 0x2) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000001f80)={'ip6_vti0\x00', &(0x7f0000001fc0)=@ethtool_cmd={0x41, 0x5, 0x3, 0x0, 0x7, 0x0, 0x0, 0xfc, 0x0, 0xfc, 0x0, 0xfffffff9, 0x0, 0xff, 0x0, 0x45, [0x0, 0x6]}}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f0000019100400014000200100011"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000100)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000240)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x1, 0x5f6, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x24}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_open_dev$media(&(0x7f00000003c0), 0x6be, 0xc8683) ioctl$MEDIA_IOC_REQUEST_ALLOC(r10, 0x80047c05, &(0x7f0000000480)) r11 = dup(r9) syz_ublk_setup_queues(r11, r8, &(0x7f0000000340)={0x0, 0x20fb87, 0x1, 0xfffffffd, 0x32c}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xba5e, 0x8000, 0x1006, 0x160, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6605, 0x200, 0x10000000, 0x546}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88db, 0x10000, 0x3, 0xfffffffc, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000000, 0x8000, 0x2, 0xbd, 0x0, r3}}], 0x1, &(0x7f0000000540)={0x2e, 0x54, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r7, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) ioctl$MEMREADOOB(r11, 0xc0104d04, &(0x7f0000000500)={0x6, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_modify_offsets$flags(r4, r12, 0x38, 0xfffffffa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x14) syz_usb_connect(0x3, 0x96d, &(0x7f0000000a80)=ANY=[@ANYBLOB="12010102e21b5140b1134200e8a90102030109025b09040d9720090904320409f073ea09090503002000f80040090504104000"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r11, 0x7b2, &(0x7f0000001b40)={&(0x7f0000000b40)=[0x5, 0xaa4, 0xdb, 0x7, 0xd, 0x800, 0x401, 0xf, 0x4, 0x6, 0x800, 0x40, 0x6, 0x4, 0xfffffffe, 0x40d, 0xff, 0x1, 0xc6, 0x100, 0x6, 0x3, 0x80000001, 0xbfb, 0x2, 0x6, 0x8, 0x6, 0x5, 0x64fe2241, 0x6, 0x5, 0x8, 0x8, 0x8b, 0x2, 0x69, 0x3, 0x6, 0xadb433a, 0x10000, 0xffff96d0, 0x0, 0x0, 0x0, 0x2, 0x1000, 0x401, 0x5, 0x0, 0x8001, 0x400, 0x2, 0x5, 0x80, 0x400, 0x5, 0x9, 0x80000001, 0x10001, 0x9, 0x4, 0x8000, 0x7, 0x1, 0x7, 0xffff8000, 0xfffffff7, 0x5, 0x6, 0x0, 0x1, 0xfffffffc, 0x7, 0x7ff, 0x8000, 0x4, 0x2, 0x6, 0x0, 0x2, 0x2, 0x86b, 0x3, 0x5, 0x65c8049d, 0x8, 0x8, 0x6, 0x2, 0xe1, 0x9, 0x6, 0x4, 0x0, 0x3, 0x5, 0x101, 0x9, 0x3, 0x0, 0x0, 0x2, 0x3, 0x3, 0x80000001, 0x5664, 0x80, 0x75, 0x3, 0x8, 0xee, 0x8000, 0x1, 0x10000, 0x7f, 0xa4c, 0x5, 0x80, 0xb, 0x8, 0xb, 0xd, 0xfffffffe, 0x9, 0x1432, 0x0, 0x0, 0x6, 0x1, 0xdb71, 0xffff, 0x4, 0x101, 0x3, 0xc3b9, 0x1, 0x2, 0xb1e4, 0x9, 0x3, 0xe, 0x80000001, 0x8, 0x401, 0x1, 0x7, 0x2, 0x385, 0xde, 0xab84, 0xde, 0x8001, 0x7, 0x7, 0x8000, 0x9, 0x2, 0x2, 0x9, 0x2, 0x5, 0x9, 0x0, 0x6, 0x2, 0x5, 0x81, 0x1000, 0x7, 0x4, 0x40, 0x2, 0x8, 0x10000, 0x9, 0xfffffffe, 0x2, 0xfffffffb, 0x5, 0x1, 0x1, 0x10, 0x2549, 0x5, 0x200, 0x0, 0xeb2, 0x3, 0x2, 0x2, 0xc, 0x6, 0x3ff, 0xffffe3dc, 0x2, 0x9, 0x8, 0xffffdd5e, 0x80, 0xfff, 0x2, 0x1, 0x0, 0x200, 0xe48d, 0xfffff8ee, 0xb1, 0x81, 0xeb, 0x3, 0x0, 0x1, 0x80000001, 0x5, 0x1ff, 0x7, 0x7, 0x5, 0x2, 0x6a38bf39, 0x6, 0x7ff, 0x1bb800, 0x7, 0x5, 0x4, 0x3ff, 0x81, 0x8000, 0x7f, 0x66, 0xffffffff, 0x80, 0x9, 0x0, 0x226a, 0x8, 0x4, 0x790, 0x0, 0xffff8001, 0x8f, 0xbbf, 0x5, 0xffff, 0x9, 0xb83, 0x5, 0x0, 0x6, 0x4, 0x3b, 0x2, 0x8001, 0x8, 0xb9e, 0x6, 0x3, 0x0, 0x9, 0x6, 0x3, 0xfffffff9, 0x7ff, 0x100, 0x0, 0x81, 0x3ff, 0x8, 0x400, 0x9, 0x4, 0x7, 0x8, 0x6, 0x11, 0x1, 0xfffffffd, 0x5, 0xe7cb, 0x3, 0x5, 0xc, 0xff, 0x400, 0x4, 0xb30, 0xe4, 0x7fffffff, 0x9, 0x7, 0xa, 0x1afa, 0x2, 0x6, 0x2, 0x6, 0x1, 0x5, 0x9, 0x2, 0x8001, 0xe, 0x1, 0xfffffffe, 0x2, 0x0, 0x7, 0x66, 0xfffffffa, 0x5, 0x6, 0xe, 0x4, 0x2, 0xe38, 0x3, 0x80, 0xdb23, 0x1, 0x6456, 0x6000000, 0x8, 0xffff, 0x9, 0x0, 0x8d, 0x56, 0xb, 0x2, 0x4, 0x7ff, 0x8, 0x0, 0x9, 0x2f, 0x7, 0x1, 0x1, 0x3, 0x4, 0x4, 0x80, 0x4, 0x9, 0x3, 0xffffff5b, 0x5, 0x48f, 0x7, 0x0, 0xb753, 0xb7a6, 0xfff, 0x2, 0x9, 0x9, 0x6, 0x3, 0x4, 0x20, 0xe223, 0x80, 0x5, 0xfffffffe, 0x1, 0xfffffffb, 0x100, 0x3, 0x115d, 0xfffffff9, 0x5, 0x2, 0x5, 0x7, 0x6236a69d, 0x1, 0xffffffff, 0x0, 0x0, 0x1, 0x8c, 0x4, 0x8, 0xc, 0x77, 0x9, 0xf, 0x6, 0x1d7, 0x6, 0x9, 0xffffffff, 0x7, 0xf2, 0x5, 0x9, 0x3, 0x3, 0x9, 0x0, 0xc, 0x1, 0x3, 0x1, 0x2, 0x3, 0x1, 0xe0, 0x6, 0x9, 0x9, 0x7, 0x7fff, 0x80000001, 0xa429, 0x6, 0xf20, 0x7fffffff, 0x8, 0x2, 0x0, 0x100, 0x6, 0x7, 0x7, 0x6, 0x7, 0x6, 0x8, 0x8, 0x6, 0x7, 0x0, 0xc06, 0x9, 0xf0, 0x6, 0x7ff, 0xe00, 0x12a4, 0x0, 0x3, 0x8ae0, 0xffffffe7, 0x2, 0x4, 0x9, 0x0, 0x80, 0x10001, 0x7, 0x4, 0x8, 0x4, 0x5, 0x4, 0x4, 0x4, 0xf3, 0xfffffffe, 0x5, 0x0, 0xe22, 0x67, 0x7, 0x0, 0x6, 0x2, 0x1, 0x1, 0x9, 0x4, 0x4d, 0x0, 0x0, 0x55, 0x8000, 0xfd, 0xfffffff7, 0x9, 0x10001, 0x10000, 0x81e, 0xaaa0, 0x3, 0xc60, 0x88, 0x10a6, 0x8, 0xef9f, 0x7, 0x7fff, 0x5, 0x6, 0x8e8, 0x200, 0x0, 0x7ff, 0x0, 0x3, 0x100, 0x1, 0x2, 0x2, 0x0, 0x6, 0x0, 0x5cb6, 0x5, 0x0, 0x7e64, 0x0, 0x3, 0x5, 0x9, 0x254, 0xb86, 0x1ab2e81, 0x30ba, 0xb772, 0xd, 0x6, 0x5, 0x8000, 0x0, 0x0, 0x1, 0x2, 0x67db375a, 0x7fff, 0x80000001, 0x4, 0x9, 0x5, 0x8, 0x3, 0xb00e, 0xf0b, 0x833, 0x5b, 0x3, 0x40, 0x80000001, 0xb, 0x4, 0x2, 0x0, 0x9, 0xf, 0x6, 0x200, 0x1, 0x5, 0x6, 0x7, 0x1ff, 0x8, 0x18, 0xc90, 0x6, 0x0, 0x8, 0x9, 0x800, 0x3, 0x7, 0x1000, 0xc, 0x6, 0x7, 0xfff, 0x9, 0x7fff8000, 0x1, 0xff800000, 0xca, 0x6, 0x3, 0x2, 0x8, 0x5, 0x5, 0xfffffffe, 0x10001, 0x400, 0x3, 0xffffffae, 0x4, 0x3, 0x7, 0x2, 0x9, 0xfffffbff, 0x0, 0x0, 0x4, 0x4, 0x3, 0x5, 0x7, 0x0, 0x1, 0x7, 0x8, 0x7, 0x5, 0x5, 0x404, 0x8, 0x7, 0x9, 0x5, 0x4d1, 0x6, 0x80000000, 0x5, 0x9f, 0x4, 0xfffffff8, 0x7ff, 0x2, 0x40000000, 0xc3, 0xa293, 0x2, 0x9, 0xd, 0x8, 0x3, 0x1fed, 0x8, 0x1, 0x9, 0x3, 0x1, 0xb0, 0x5, 0x42d, 0xfffffff9, 0x4, 0x8001, 0x51, 0x80, 0x6, 0x6, 0x100, 0x0, 0x7, 0x93dd, 0x6, 0x13, 0x81, 0x8, 0x81, 0x2b, 0x0, 0x5, 0x2, 0x2, 0xc3c, 0x4, 0x2, 0x9, 0x4, 0x6, 0x2, 0x8, 0x2, 0x3b, 0x5, 0x0, 0x5, 0x6, 0xf, 0x37, 0xffff, 0xb9, 0xca12, 0x324bc677, 0x0, 0x9, 0xffff, 0xf5, 0x7ff, 0x40, 0x101, 0x0, 0x8, 0x400, 0xbd, 0x0, 0x5, 0x1, 0x3, 0x80, 0x800, 0x4, 0x7f, 0x1, 0x8, 0x7, 0x2, 0x0, 0x6, 0xfffffffa, 0x8, 0xff6, 0x8000000, 0x9, 0x6, 0x8, 0x6, 0x0, 0x4, 0x5, 0x4, 0x0, 0x138a, 0x0, 0x7f, 0x0, 0xfffffff8, 0x1, 0x0, 0x6, 0x2, 0x6, 0x8f, 0x5, 0x3a, 0x8, 0xc0, 0x6a3b, 0x2, 0xffffff86, 0x35, 0x2, 0x8, 0x4, 0xa, 0x2, 0x1, 0x7f000, 0x8, 0x449, 0x9, 0x200, 0x8, 0x86, 0x4, 0x800, 0x4, 0xffff, 0x8, 0x2, 0x5, 0x9, 0x200, 0x6, 0x67, 0xffffffff, 0xfff, 0x3, 0x8, 0x8000, 0x2, 0x12a, 0x8, 0x6, 0x8, 0x25, 0x5, 0x38, 0x5, 0x8, 0x4, 0x39, 0x9745, 0xa2a, 0x81, 0x7, 0x6, 0x4, 0x4, 0xfffffff7, 0x516f, 0x8, 0x1, 0x400, 0x3ff, 0x360, 0x2b0c2d27, 0x0, 0x2, 0x101, 0x12, 0x3, 0xdea, 0x3, 0x6a, 0x1ff, 0x2, 0x6, 0xfffffff8, 0x8001, 0x5, 0x401, 0x2, 0x2, 0x0, 0x1, 0x0, 0x200, 0x10, 0x9, 0x9, 0x3, 0x3, 0x1, 0x3, 0xd, 0x2e0, 0x401, 0x8000, 0x0, 0xae, 0x4, 0x4, 0x6, 0x9f58, 0x9, 0x8, 0x1, 0x2, 0x9, 0x8, 0x2, 0x9, 0x2, 0x20, 0x4, 0xf, 0x401, 0x1, 0x401, 0x3, 0x0, 0x3, 0xc, 0x800, 0x28000000, 0x3, 0x5af9, 0x0, 0xb6c, 0x8, 0xb907, 0x4, 0x7, 0xffff2d21, 0x485, 0x1000, 0x6, 0x4, 0x1, 0x81, 0x2, 0xbd1e, 0x6, 0x33, 0xd, 0x80, 0x8, 0xf9, 0x7fffffff, 0x10001, 0x11, 0x1, 0xe, 0x0, 0x4, 0x9, 0xffffffff, 0x7, 0x9, 0x5, 0x7f1f, 0x7, 0x7, 0x8, 0x3, 0x7, 0xc, 0x7, 0x3, 0x0, 0x2, 0x40, 0xd, 0x9, 0x9, 0x200, 0x40, 0x31cc, 0xffff56d2, 0x20000000, 0xfff, 0x9, 0x5, 0x5, 0xfffffff9, 0x0, 0xff, 0x100, 0x3, 0x6, 0x0, 0x8b, 0x200, 0x80, 0x2, 0xffff, 0x8001, 0xd8c7378, 0x1, 0x4, 0x0, 0x5, 0x3, 0x3, 0x1, 0xdc5e, 0x0, 0x4, 0x3b, 0xffff, 0x1, 0xffffffff, 0xffff, 0x1, 0x400, 0x0, 0x2, 0x5, 0x1000, 0x8000, 0xfffffeff, 0x620a, 0x5, 0x2, 0x0, 0x8, 0x4, 0xdc, 0x2, 0xe, 0x7, 0x140000, 0xfffffff7, 0x1ff, 0x0, 0xb, 0xfd, 0xdd18, 0x0, 0x1, 0x40, 0x5, 0x7c43, 0x4, 0x2c, 0xffff, 0x8, 0x6, 0x200, 0x9, 0xffff, 0x9f, 0x6, 0x3, 0x100, 0x2, 0x9, 0x2, 0x9, 0x1, 0x100, 0x7, 0x5, 0xe, 0x24, 0x8001, 0x6, 0x8000, 0x3, 0xf2, 0x2, 0x1, 0x10001, 0xdeca, 0x4, 0xea, 0x6, 0x3, 0x8, 0x7ff, 0x9, 0x0, 0x8, 0x5b, 0x9, 0x4, 0xff, 0xbf02, 0x2e90a212, 0x40000c, 0x8, 0x20000000, 0x6, 0xffff, 0xfffff801, 0x2], 0x2, 0x400, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000b00)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x16b8c5b5213a03b5}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$uac2-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000500)=ANY=[@ANYBLOB="120110030000004035120182400001020301090286080000003009080b00010107208c0904000000010120000924010040041d000708240a0001ff23030c240302"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="004e82a3adfc8c4409e6f5030400000004034308"], 0x0, 0x0, 0x0}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-openat-write-syz_usb_connect-syz_usb_control_io$printer-syz_usb_control_io$printer-socket$xdp-socket$unix-bind$unix detailed listing: executing program 0: madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r0, &(0x7f0000000740)='0', 0x1) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\t/'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000780)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-socket$nl_generic-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK-sched_setaffinity-bpf$PROG_LOAD-socket-ioctl$FS_IOC_SETFSLABEL-openat$binderfs-socket$nl_generic-syz_genetlink_get_family_id$nl80211-ioctl$BINDER_SET_CONTEXT_MGR_EXT-openat$binderfs-ioctl$BINDER_WRITE_READ-dup3-openat$binderfs-mmap$binder-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-socket$inet6-shutdown-recvmmsg-unshare-socket$igmp-setsockopt$MRT_ADD_MFC-setsockopt$MRT_INIT-socket-sendmsg$nl_generic detailed listing: executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r2, @ANYBLOB="5c005a80140001800500070001000000050006000100000044000380120001000c"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000000c0)="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") r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0x3}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffe0f, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r8 = socket$inet6(0xa, 0x2, 0x0) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f0000008880), 0x45b, 0x2, 0x0) unshare(0x62020400) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r9, 0x0, 0x5, &(0x7f0000000240)={@loopback, @multicast2, 0xfffb, "66c5aff8a7eb17f1f6cec2e7780795478c84aea31700", 0x96bf, 0x2, 0x7a, 0x6b}, 0x3c) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000000), 0x4) socket(0x10, 0x3, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4001010) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet6_udp-sendmmsg$unix-syz_open_procfs-pread64-recvmmsg-sched_setattr-sendmmsg-socket-socket$inet6_tcp-close-socket$inet6_mptcp-bind$inet6-listen-socket$inet_smc-connect$inet-accept-connect$inet-sendmmsg$inet-mlock-mlock2-io_uring_setup-syz_create_resource$binfmt-write$binfmt_script-close-write$uinput_user_dev-execveat$binfmt-socket$inet-bpf$PROG_LOAD detailed listing: executing program 0: socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') pread64(r0, &(0x7f0000000040)=""/227, 0xe3, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x5, 0x8, 0x1, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0x2}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x800) r1 = socket(0x840000000002, 0x3, 0x100) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) accept(r3, 0x0, 0x0) connect$inet(r1, &(0x7f0000000580)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f00000005c0), 0x4000095, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) io_uring_setup(0x20006d15, &(0x7f00000007c0)={0x0, 0xcc52, 0x200, 0x80001, 0x10c}) r5 = syz_create_resource$binfmt(0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000880)={'#! ', './file1'}, 0xb) close(0xffffffffffffffff) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {0xe, 0xfff, 0x9, 0x1}, 0x15, [0x28, 0x1, 0x81, 0xf0, 0x7b, 0x1, 0x3, 0x6, 0x4, 0x4, 0x3, 0x4, 0x8, 0x311, 0x2c60, 0x0, 0x6, 0x8001, 0xfffff800, 0x800, 0x8001, 0xfffffffa, 0x0, 0x5, 0x1, 0xfe01, 0x5, 0xfd4, 0x0, 0x2, 0x8ffd, 0x1000, 0x9, 0x7, 0x81, 0x8, 0xffffffff, 0x54, 0x9, 0x9, 0x8, 0x649, 0xfffffff7, 0x9, 0xd, 0x9, 0x5, 0xb, 0x2, 0x1, 0x306f, 0x24, 0xffff0001, 0x80000000, 0x6, 0x2, 0x80000001, 0x101, 0x80, 0xc0000000, 0x80, 0x9, 0x1, 0xcdb1], [0x6, 0xc260, 0x1, 0x6, 0x64b, 0x2, 0x9, 0x4, 0x1, 0x4, 0x7, 0x2, 0x93a, 0x4cc, 0x5, 0xd284, 0x7, 0xffff, 0x8, 0x7, 0xfffffff9, 0x3, 0x4, 0x6, 0x8, 0x2b16, 0xffff, 0x4, 0x7ff, 0x464, 0x0, 0x8, 0x6, 0x5, 0x3, 0x6, 0x0, 0xfffffff8, 0x7, 0xe0000000, 0x1c3, 0x80, 0x6, 0x0, 0x1, 0x12b4, 0x7, 0x1, 0x4, 0x3, 0xd, 0xffffffff, 0x49e7, 0x9, 0x3, 0x3, 0x6, 0x0, 0x8, 0x1, 0x9c0, 0x7, 0x8, 0xd], [0x6, 0x46, 0xfffffff9, 0x8001, 0xfffffff8, 0xa, 0x7f, 0x8, 0x6, 0x923, 0xf, 0x7, 0x1, 0x6, 0xf9c2, 0x80000001, 0x0, 0xeb4ef54, 0x5c77, 0x1, 0xb28, 0x7, 0x7f, 0x0, 0x10, 0x7c, 0x8, 0x401, 0x0, 0x4, 0x5, 0x0, 0x0, 0x2, 0x4, 0x0, 0x6, 0x9, 0x2, 0xc3, 0x4, 0x9, 0x4, 0xa0000, 0xfffffffd, 0x0, 0x5, 0xfffffc01, 0x1, 0x5, 0x101, 0x6, 0x7ff, 0x6, 0x2, 0x1d4, 0xffff0001, 0xf, 0x7ff, 0x3a, 0x21, 0x8000, 0x2, 0xfff], [0xeab, 0x8001, 0x200, 0x3, 0x401, 0x6, 0x9, 0x0, 0x7, 0xff, 0xe3f7, 0x246, 0x7ff, 0x8, 0xfffffffe, 0x7ff, 0x5e59efab, 0x1, 0xddd, 0x2, 0x800, 0x4, 0x10001, 0x4, 0x3, 0x4, 0x6, 0x7, 0x1, 0x5, 0x997, 0x401, 0x0, 0x6, 0xfffff61e, 0xfffffffa, 0x80, 0x7, 0x0, 0x8, 0x1, 0x8, 0x934, 0xcd0, 0x1000, 0x1, 0x0, 0x8, 0x8, 0x6, 0x5, 0x80, 0xff, 0x5, 0x6, 0x29ef, 0x6, 0xc2, 0x6, 0x4, 0x8, 0x339c, 0x7, 0x7]}, 0x45c) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-socket$inet6_udp-sendmmsg$unix-syz_open_procfs-pread64-recvmmsg-sched_setattr-sendmmsg-socket-socket$inet6_tcp-close-socket$inet6_mptcp-bind$inet6-listen-socket$inet_smc-connect$inet-accept-connect$inet-sendmmsg$inet-mlock-mlock2-io_uring_setup-syz_create_resource$binfmt-write$binfmt_script-close-write$uinput_user_dev-execveat$binfmt-socket$inet-bpf$PROG_LOAD detailed listing: executing program 0: socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') pread64(r0, &(0x7f0000000040)=""/227, 0xe3, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x5, 0x8, 0x1, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0x2}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x800) r1 = socket(0x840000000002, 0x3, 0x100) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) accept(r3, 0x0, 0x0) connect$inet(r1, &(0x7f0000000580)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f00000005c0), 0x4000095, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) io_uring_setup(0x20006d15, &(0x7f00000007c0)={0x0, 0xcc52, 0x200, 0x80001, 0x10c}) r5 = syz_create_resource$binfmt(0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000880)={'#! ', './file1'}, 0xb) close(0xffffffffffffffff) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {0xe, 0xfff, 0x9, 0x1}, 0x15, [0x28, 0x1, 0x81, 0xf0, 0x7b, 0x1, 0x3, 0x6, 0x4, 0x4, 0x3, 0x4, 0x8, 0x311, 0x2c60, 0x0, 0x6, 0x8001, 0xfffff800, 0x800, 0x8001, 0xfffffffa, 0x0, 0x5, 0x1, 0xfe01, 0x5, 0xfd4, 0x0, 0x2, 0x8ffd, 0x1000, 0x9, 0x7, 0x81, 0x8, 0xffffffff, 0x54, 0x9, 0x9, 0x8, 0x649, 0xfffffff7, 0x9, 0xd, 0x9, 0x5, 0xb, 0x2, 0x1, 0x306f, 0x24, 0xffff0001, 0x80000000, 0x6, 0x2, 0x80000001, 0x101, 0x80, 0xc0000000, 0x80, 0x9, 0x1, 0xcdb1], [0x6, 0xc260, 0x1, 0x6, 0x64b, 0x2, 0x9, 0x4, 0x1, 0x4, 0x7, 0x2, 0x93a, 0x4cc, 0x5, 0xd284, 0x7, 0xffff, 0x8, 0x7, 0xfffffff9, 0x3, 0x4, 0x6, 0x8, 0x2b16, 0xffff, 0x4, 0x7ff, 0x464, 0x0, 0x8, 0x6, 0x5, 0x3, 0x6, 0x0, 0xfffffff8, 0x7, 0xe0000000, 0x1c3, 0x80, 0x6, 0x0, 0x1, 0x12b4, 0x7, 0x1, 0x4, 0x3, 0xd, 0xffffffff, 0x49e7, 0x9, 0x3, 0x3, 0x6, 0x0, 0x8, 0x1, 0x9c0, 0x7, 0x8, 0xd], [0x6, 0x46, 0xfffffff9, 0x8001, 0xfffffff8, 0xa, 0x7f, 0x8, 0x6, 0x923, 0xf, 0x7, 0x1, 0x6, 0xf9c2, 0x80000001, 0x0, 0xeb4ef54, 0x5c77, 0x1, 0xb28, 0x7, 0x7f, 0x0, 0x10, 0x7c, 0x8, 0x401, 0x0, 0x4, 0x5, 0x0, 0x0, 0x2, 0x4, 0x0, 0x6, 0x9, 0x2, 0xc3, 0x4, 0x9, 0x4, 0xa0000, 0xfffffffd, 0x0, 0x5, 0xfffffc01, 0x1, 0x5, 0x101, 0x6, 0x7ff, 0x6, 0x2, 0x1d4, 0xffff0001, 0xf, 0x7ff, 0x3a, 0x21, 0x8000, 0x2, 0xfff], [0xeab, 0x8001, 0x200, 0x3, 0x401, 0x6, 0x9, 0x0, 0x7, 0xff, 0xe3f7, 0x246, 0x7ff, 0x8, 0xfffffffe, 0x7ff, 0x5e59efab, 0x1, 0xddd, 0x2, 0x800, 0x4, 0x10001, 0x4, 0x3, 0x4, 0x6, 0x7, 0x1, 0x5, 0x997, 0x401, 0x0, 0x6, 0xfffff61e, 0xfffffffa, 0x80, 0x7, 0x0, 0x8, 0x1, 0x8, 0x934, 0xcd0, 0x1000, 0x1, 0x0, 0x8, 0x8, 0x6, 0x5, 0x80, 0xff, 0x5, 0x6, 0x29ef, 0x6, 0xc2, 0x6, 0x4, 0x8, 0x339c, 0x7, 0x7]}, 0x45c) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$nl_route-sendmsg$nl_route-epoll_create1-socket$nl_netfilter-openat$nvme_fabrics-syz_emit_ethernet-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-prctl$PR_SCHED_CORE-sched_setattr-memfd_create-execveat-add_key$user-pipe2$watch_queue-ioctl$IOC_WATCH_QUEUE_SET_SIZE-keyctl$KEYCTL_WATCH_KEY-read$watch_queue-keyctl$revoke-ioctl$OCFS2_IOC_GROUP_EXTEND-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-ioctl$sock_inet_SIOCADDRT-write$tun-open-fsopen detailed listing: executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010000305000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="95430200000002002c00128009000100626f6e64000000001c000280000012000900000008000500ff010000e9fd03000800001e"], 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x40800) epoll_create1(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) memfd_create(&(0x7f0000000440)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(0xffffffffffffffff, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x5b) read$watch_queue(r1, &(0x7f0000000640)=""/1, 0x1) keyctl$revoke(0x3, r4) ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f0000000680)=0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000700)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000740)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000780)={0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @remote}, 0x4, 0x0, 0x0, 0x0, 0x200a, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r6, &(0x7f0000000800)=ANY=[@ANYBLOB="080000fa"], 0xdc) open(&(0x7f0000000840)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000880)='nfs4\x00', 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-socket$nl_route-sendmsg$nl_route-epoll_create1-socket$nl_netfilter-openat$nvme_fabrics-syz_emit_ethernet-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-prctl$PR_SCHED_CORE-sched_setattr-memfd_create-execveat-add_key$user-pipe2$watch_queue-ioctl$IOC_WATCH_QUEUE_SET_SIZE-keyctl$KEYCTL_WATCH_KEY-read$watch_queue-keyctl$revoke-ioctl$OCFS2_IOC_GROUP_EXTEND-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-ioctl$sock_inet_SIOCADDRT-write$tun-open-fsopen detailed listing: executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010000305000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="95430200000002002c00128009000100626f6e64000000001c000280000012000900000008000500ff010000e9fd03000800001e"], 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x40800) epoll_create1(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) memfd_create(&(0x7f0000000440)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(0xffffffffffffffff, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x5b) read$watch_queue(r1, &(0x7f0000000640)=""/1, 0x1) keyctl$revoke(0x3, r4) ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f0000000680)=0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000700)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000740)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000780)={0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @remote}, 0x4, 0x0, 0x0, 0x0, 0x200a, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r6, &(0x7f0000000800)=ANY=[@ANYBLOB="080000fa"], 0xdc) open(&(0x7f0000000840)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000880)='nfs4\x00', 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 44 programs with base timeout 1m40s testing program (duration=1m51s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [40, 26, 15, 30, 3, 30, 30, 30, 10, 18, 1, 17, 29, 29, 1, 26, 24, 2, 2, 19, 1, 24, 30, 5, 10, 2, 28, 5, 6, 4, 5, 30, 30, 9, 4, 14, 2, 1, 2, 23, 4, 5, 28, 2] detailed listing: executing program 1: syz_usb_connect(0x2, 0x9a2, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904", @ANYRESOCT, @ANYRESOCT], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x151c00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x20, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x20, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) (async) keyctl$clear(0x3, 0xfffffffffffffffd) add_key(&(0x7f00000001c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="e4010000100001000000000000000000fc000000000000000000000000000000000000000000000000ecdf000000000a00000000000000080000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000c73b0000000000000000000000000000000000800000000000000000000000000000000000000000ffffffff2dbd700000000000020004004c000000000000001c001700000000002abd700000000000000000000000000000000000480002006362632873657270656e742900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008d001400686d61632873686132353629000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000802000080000000aef356316f6f7d6ab0f8637b42ff0300008aa309bdd3f9dcffb669556b74c61e032441fd13571c4c64597441f3cf2a548c89a004673b82b4618529a52c676f7c94000000", @ANYRESDEC=r2], 0x1e4}}, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="e4010000100001000000000000000000fc000000000000000000000000000000000000000000000000ecdf000000000a00000000000000080000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRESDEC=r2], 0x1e4}}, 0x0) socket$rds(0x15, 0x5, 0x0) (async) socket$rds(0x15, 0x5, 0x0) request_key(&(0x7f00000019c0)='ceph\x00', &(0x7f0000001a00)={'syz', 0x3}, &(0x7f0000001a40)='{\x00', 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000600)='keyring\x00', &(0x7f0000001a80)={'syz', 0x0}, 0x0, r5) fsopen(&(0x7f0000000140)='hfsplus\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a300000000098ce9a9ff70a010400000000000800000100000008000a400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000009608000600000000220500020089000000380001800c0001006269747769736500280002800800034000000004080001400000001408000240000000120800048004000100040005800900010073797a3000000000140000001100010000000000000000000000000a"], 0x10c}}, 0x0) syz_open_dev$evdev(&(0x7f00000005c0), 0x4, 0x2) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000440)=""/230, 0xe6}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0xc001}, 0x0) (async) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000440)=""/230, 0xe6}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0xc001}, 0x0) executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 32) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = openat(0xffffffffffffff9c, 0x0, 0x41, 0x48) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r2 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) (async, rerun: 32) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) (async, rerun: 32) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000580)={0x1, 0x1, 0x4a, r10, 0x4}, 0xc) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) r11 = add_key$user(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), 0x390, 0xfffffffffffffffd) (async) r12 = add_key$user(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, &(0x7f0000000780)="01", 0x1, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000e00)='user\x00', &(0x7f0000000e40)=',(+\x00') (async) keyctl$dh_compute(0x17, &(0x7f00000007c0)={0x0, r11, r12}, 0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={'sha256\x00'}}) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000005c0)=0x0) (async, rerun: 64) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000e80)={0x0, 0x8, 0x4, 0x1}) (rerun: 64) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000001280)={{r9}, r13, 0x1, @unused=[0x0, 0x2, 0x48d, 0x5], @devid=r14}) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000880)={r11, 0x8c, 0xd6}, &(0x7f00000008c0)={'enc=', 'pkcs1', ' hash=', {'sha1_mb\x00'}}, &(0x7f0000000940)="f9e4217198c336c83d51f5290ff200b0edc96e2dc80b0b15bf99155f4aa2f8d5bae1be880697a40d25ca503a433d19f91bfd23cf0c9b89391aeb265f3e70ee00c1d3f975df148411cacfaf971c0185aafd821c680effc440c55e3298a13098db006ebf90a00737f4b1b9b08ae57a9843d90125ba1a6fe43227ab063e101ea2bba890820551b062c6a175c33c", &(0x7f0000000d00)=""/214) (async, rerun: 32) r15 = dup(r8) (rerun: 32) syz_ublk_setup_queues(r15, r7, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) executing program 1: r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r0, &(0x7f0000000040)={{0x108, 0x7, 0x5e, 0x192, 0x222, 0x9, 0x2c9, 0x9}, "dfc5dabb95719232efc29d0fd6226c922084036c51caa570eb7752cd37667b3251b2d9965fe6f96c099fa83baf94e459c0788bad78f4f66d58cefefc9717fb1f66fe1ef7c03d3862e48782d71f95845b62ed9662a1774231d430c2ffe18e34179520c1fee50091db4bf37d883f1da46904c17fc949e1dbb5f8716c8d950e51623a7ab597f0ebadcaf308067910589301b9345b07459855689866a52c6a30712d658fac995328a384fbd1b62c17f14222e524e3de8ab74822182f62f67cf0277d57ba4336184d087c4eaceac9e522d566bd8d7b4fca6fbaa0139c4083fc3a874b957f3fc0880245", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa07) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000a80)=0x2, 0x4) r2 = syz_open_dev$video(&(0x7f0000000c00), 0x7, 0x0) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000ac0)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000b00)=0x7, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000b80)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000bc0)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000c00)=ANY=[], 0xfb5) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x229, 0x0) executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000740)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="7800000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000058001a8006000000010000004c0005804800088008000100010000000a000200000000000000000008000300000000000800050000000000080005000000000005000600000000000800070000000000050008"], 0x78}}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000140)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = syz_open_dev$vim2m(&(0x7f0000000400), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000440)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000580)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000005c0)={0x3, 0x1, 0x4, "3a000000000016c713b40c2a3600000000000000000000020100", 0x38414261}) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x41, 0x48) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000700), 0x440, 0x0) write$rfkill(r6, 0x0, 0xfffffeac) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r7 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) r11 = syz_open_dev$sg(&(0x7f0000000080), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r11, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000ff0f00040a000000"]) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={r13}) syz_ublk_setup_queues(r13, 0x0, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x826, 0x0, 0x0}}, 0x0) r14 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f0000000600)={0x80000000}, 0x19a) sendmsg$nl_route(r14, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x70bd2a, 0x25dfdbfc, {0x1c, 0x14, 0x0, 0x3, 0x0, 0x2, 0xc8, 0xb}}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000000000000000000000000000000002000100000000fffffffbfc0000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x400300) executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010000305000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="95430200000002002c00128009000100626f6e64000000001c000280000012000900000008000500ff010000e9fd03000800001e"], 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x40800) epoll_create1(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) memfd_create(&(0x7f0000000440)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(0xffffffffffffffff, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x5b) read$watch_queue(r1, &(0x7f0000000640)=""/1, 0x1) keyctl$revoke(0x3, r4) ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f0000000680)=0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000700)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000740)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000780)={0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @remote}, 0x4, 0x0, 0x0, 0x0, 0x200a, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r6, &(0x7f0000000800)=ANY=[@ANYBLOB="080000fa"], 0xdc) open(&(0x7f0000000840)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000880)='nfs4\x00', 0x0) executing program 32: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010000305000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="95430200000002002c00128009000100626f6e64000000001c000280000012000900000008000500ff010000e9fd03000800001e"], 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x40800) epoll_create1(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) memfd_create(&(0x7f0000000440)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(0xffffffffffffffff, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x5b) read$watch_queue(r1, &(0x7f0000000640)=""/1, 0x1) keyctl$revoke(0x3, r4) ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f0000000680)=0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000700)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000740)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000780)={0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @remote}, 0x4, 0x0, 0x0, 0x0, 0x200a, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r6, &(0x7f0000000800)=ANY=[@ANYBLOB="080000fa"], 0xdc) open(&(0x7f0000000840)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000880)='nfs4\x00', 0x0) executing program 3: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x5e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008100000282b0000000000000000000000ffffac1414bbfe8000000000000000000000000000aa3a020201"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b37, &(0x7f0000000240)={'wlan1\x00', @random="cbcdcb8d00"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a000100b5000000fbdbdf250a800005001b"], 0x24}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002ac0)={0x18, 0x26, 0x101, 0x70bd25, 0x25dfdbfb, {0x1}, [@typed={0x4, 0x167}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x24008080) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}}) socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0}, 0x94) r4 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000300)={0x20, 0x9, 0x2, '$8'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [@NFT_MSG_NEWSETELEM={0xf18, 0xc, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x268, 0x3, 0x0, 0x1, [{0x4}, {0x1fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x138, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x10, 0x1, "259d2a146103017fad365323"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY_END={0xb4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xad, 0x1, "cb0a819f98beada8969d1d307ae7c4e36653454df00343ec6a43c998add6a9fcd697df2fe77a3661b67289cec9902a41b998f892134c0ffae626dba473e7fb39fbf9b860a1ea23aa9453ee45e3c70d4bb16b7884c763395656e0eaf4f765dab9a7f49f45e073689e87543f0fabc6bff0a1d466f17313bf0cb8b4a054bf439388968c05f034ec28b1a61dfd8f668009107abe856fdcdab0f502e8923a858aeb79a883dc8bf05381e286"}]}]}, {0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7ff}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xa68, 0x3, 0x0, 0x1, [{0x4f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x13, 0x6, 0x1, 0x0, "062e050867f37d729aaf2d24e5eba0"}, @NFTA_SET_ELEM_USERDATA={0x8a, 0x6, 0x1, 0x0, "4174be053a851b44c7d2ef7fd8905200caaa02a5103f7aeb8eec7f61278adc564835cc397a239e746adc9418fde1bc80b88c7c6dc7884dbff656f0c490fd606e1ebbb2dd38b418df42ef950264814d7e38ad46b82070274fe3f2bf3d5295f4a0bf33e0d520a2e5e2d231eeca9c9f85eaa6eea35710c026a94427a5808b24bffb7f87806efae4"}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x288, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x84, 0x1, "a23dce67c32b56b0f26ae9fbad2fa87f5566dc3cfeb8176ed80882c0b4a2ad76b3ed1a3a784382dd739cbedcc523b7517b03a9b3e67e47b9fc9d2388ade5f5eabe48725285c0f862ee6797119a5a734435a6adc60157243b1a6f1eebdc26d0d7897464b4b46cacb621241f5ca8db9d6bac6057e45e6794c1ef82269ad8b1bc50"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xda, 0x1, "d52b73044fe4a7513b01f296b53f54d82ff3a2bbb3c03fe6245137d24dc8eedc3a591bd5055ef0ea23271e5e0b5c148413906e4e04f79ec733c300306a2771d853e2e23bdbc0449f583e3bc8cf58b2b4f2163de3e5920a1cca576cfcc4a753947ce0605c6d23fe9cebed60a55582f95249d52334dc98cf50043423f1f810ca0b43c6621c96e1ff2d000957cf0c6f3777158c285a0bcda160381db11faff2662c5abcc9cbae1d38393762acf4c46490aabf3a3ad7d71f3ec4d1fc36a089784c9d992a399c065260005bbfb919ad2614bcefa6287272e7"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x25, 0x1, "8f600da4016a6db5875813e4da44ea97c3668bc150838ff2e8528ea2b88156530c"}, @NFTA_DATA_VALUE={0x7e, 0x1, "4bcf884e9b6aee45f4e726e18798c0307df187991ac0a25668a0e874d33067350744f710a05de37cf98cfcaa2500d5ccf6580d28a7fc9a6fba7f11a614b8c57177eaa5b1f54b31d3d26a62a9d6a565a7fafc1542eee0b1b769e98aba2d2f08158df96e2bb03fd94a6071aa8d4b8e701bf5397a2551fffdbba8a4"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_USERDATA={0x1e, 0x6, 0x1, 0x0, "a5b247a0d61a094224f21b9a7d43d12d4c976f58bcc87a28e794"}, @NFTA_SET_ELEM_KEY_END={0x50, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4c, 0x1, "58aa305b8fc735b45671a05fd70fcfa2fa6093dc03acb81cd8588ff3457b1786b4d035a9645657020eb901477833ac71164bd3298f4188e08a6dfde4ee7d981912c110a020cf0d3f"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xe8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x58, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5}]}}}, {0x38, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}]}, {0x8c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xdaa}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPR={0x48, 0x7, 0x0, 0x1, @dup={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, {0x4e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @counter={{0xc}, @void}}, @NFTA_SET_ELEM_KEY={0x14c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb4, 0x1, "8aa784c683338d6fec63cef96530fe7810a9eab5b30c3a7a72d3fe90de9f503157d5ff7fd9a38b675f76bcb9fd115a42a93059888095f625d9ec2fe71ccfc1dfa706aa9e126e558c9cf14451bc61a7fbc72473c0e801b82b96568dc52feb9ea0caaff126a04bcf0d76d749bbee972d30b6e71570482dc0d2497becfdc6d16457149f8bea1a416e1fbe938c6fde91338e16ee2b6b696bed57901edbbd8dec4e35d01a0bc6645f58b3e5f6f4439f8dbf21"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xbf485e0530a3d730}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x380, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xba}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5c}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x2c8, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2b8, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x2a4, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xda, 0x1, "ef083c78626a0cf9d3e7cd4194ff805bc210047fd60fc56d09db27406abb1d772db994cddd8eeb23e84b6fcf39b01f81801ddc7617b466523968f43aa88e16d38ac16357cbe9ecc215d4e73238e129b6de728e8dbe5ff60241268865ddf58028208fb21b72aff208b2fa93a56e678024cca6837c3b57079a9c32d2907b9a02a14216925bbcd4056ce83b174e26fcbe46e00874cc6cb2a76ee28ba2c5317c8d2e551bb152ac635d45040d1ed8b9e8a58337e10f684f094507201137034f735645dfa8faf16d9bab4a3fc2160e72668c6985f4697f971b"}, @NFTA_DATA_VALUE={0xeb, 0x1, "e46729abd322ded375c99467ed6a168bb77d4577100cb7444bd4c384eb736a59276b8228a2fe59b655bf2bc82f5f3dd09c37cc49ea8e942692a4d92cb866743c2026330e71b03c6fe842fd1cfd28b7e5ce570a534747c45b313de79f09df40b36fc76f409cc19a0d4f8452748c9f54fbe324dfdb9e1c8fd05b52fd71afb96093b0eab3f23e7175c90e5d5a958dc4b1355685fe4134562f459a875a8f840987eb3e6559756631603e2f78c8cf8341b2682fe3d92db122d59b29c6bb5726d375bfe8aa8c05d2c33b674ddb1a69951119c9d825096f178ab586f18360d374f0132775f3740e93fe8d"}, @NFTA_DATA_VALUE={0x36, 0x1, "7500e503099b7bd642b1a37dc1931e8367a3983808bced588bdde89896112598ed602c7799ac9b72701b35f5405bcf863545"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x31, 0x1, "79456a36c55f75ba64d5facfe4db94f23b684bd0597dfbf4933146760242f14cd9d3ca6371b4051bf074fc2bfa"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x3c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x210, 0x3, 0x0, 0x1, [{0x20c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x208, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x7f, 0x1, "05525858b3cee08c877cbd4f66c6d21eac74d2aa3e21122c9ef72b013f808a905585de9823eca50d9a96023012f1311fe55e7802279615940437cdba1b1bc640b7273fb2d98fd6f0c78b289ad372fac74373bf255449bb25b3221ca848880b9f849a2d50f6fc450a57a18c735f7fd721557f7ee6d6f38286398a8c"}, @NFTA_DATA_VALUE={0xa4, 0x1, "dced2a605720d96c1f4253cd7cbd9a83802d0f40ae9073101b56f3d5e7e76a7f721455aa41f7966f46d56c365f5a325d006705c63533da544fd05a9e7521fc21603034a525b4aa9a05cb048bb8b275df8d6ca9b34bf926fb4ff0cc82f1bc941f93c06e21238e34242b6f1a3c1edb2746c355677a198e3548cc675f9d30f816e9268b59e3406ef1283771d5ae0c8f83ed756d8e4df429af13bdc11d306f2423a5"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xad92}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x94, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffffffffffff}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x71c278cb2e30f2f7}]}}}]}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x8}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1f79b6cc}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x365b3fe6}]}]}, @NFT_MSG_DELTABLE={0x3f8, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0xad, 0x6, "5d8bb9ca947e7fda2c95684af57428b920b428f813d79c59603d21a717919ff73cea24fba8cde0666e6975bc3128b31fa7baeb8121c675d97e854db0224a1b4e18ab2aeba52141984e7a48f0112a1e677c86d8e3c650ab45d3e4f5a30d0bb3c926f3de5c838eab4213db3743bbe455c7b7a0e20d3c8e9e6e25710b115d1c3e62cda3fdcfe3f6546df308b3e3d3bf9af1893f032a5a1707f35eaab36140f47c107637032dc8c82f9650"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xe8, 0x6, "e0a2ec66c360e5f680ded268309b5deddb2df6bac585dd4cef081a1ab1a132572be2a49b51117b8f3b6041ad151438f4f71bb959369cb147a3a00c9154db518bb86a14d601db9b3a9c435aed1c6386ef2704df4b89e9d3f9d68d4d679c5ef9e560b3969a34293e04b617ddffafdf38d07ea30522a966e50dffb7089ae2312d5ac30e9c5c523b9982592cbc79bfefe0c4ba1f93525ca14812fb38796aca3a168abbcae3cec93f65d52bd0e08ec706d98a22a3176948fbe701a2e5320f2d175aeb184d1f66ffedc88288c51b5738e4d7c10d17737b6b95baebeb50d5b47ac53eb6bb77e7b8"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xec, 0x6, "924da0afd36a352087214af53c3cf468729b7130a3271050ec1cda0b9d79a0ba688e6c201a15e3c5aa4c982e6b45f8b951cc4d95f01aec02dada3bac8ae722cd8d19b2627febee1eb6b0341c8f0efeeede658c6b8db07e4d4cac909574c66847fa5f3b26aa39c59b5a0220c17a600a5e997160443a29a8c2bf0e3584cbf036f485254c66aea67002bcf78883f50d67cfbce801cf70e785a72b70aed94d6b3d14c67f088d415408707b4823a7438ff0dd156cdc917b12a6ff33850bffe3840482f13878acc82941cbe8adf01bc29a53546df78fcf834ca178a3d48c14cb6cc620ea6ee949fe9e99dc"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x89, 0x6, "167d1057cbdc2f4a04f3954a80d8ffcf114c815cfe79f649ff4744b8387263748708eb788e2058c85ccf37bd7c26649de37997b63c1b30299b5d5ad0bae27a92153be408449b27fe6367878183574f2703fb622fbf8d3381db89c92df0e019f8136a61f948dd4eb834258f3ce560685e54db4af5173a17296642476f1561aca85bbb853bb0"}, @NFTA_TABLE_USERDATA={0x99, 0x6, "038ba1db023b61f8b72918ee236c19af001c4ce72f706bf66a7028878e19d9b00f436adfe2af04f918e5bf957eb82ec1f5ee908ac7d82103b92c9421e444ba397bf647d71d2ed2a5fd979ab028be02b96dc71605775e89bd4b4f18a07bc22d6fa87c978697b35e454d711bc4a9a9a3a4fc620d4fc7df5d4ac9986ecc48f4b0f0ea91b6616a43956b43e32a4eb004e05dcc089d1b26"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1494}, 0x1, 0x0, 0x0, 0x8084}, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r3, 0xc0285840, &(0x7f0000000340)={0x4, 0x5, 0x3, 0x0, 0x400, 0x4, 0x0, &(0x7f0000000200)=[{0xc, 0x101}, {0x1c, 0xfe}, {0xd, 0x1ff, 0x6}, {0x1, 0xfe, 0x80}]}) close(r6) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, 0x0, 0x4890) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14) pidfd_getfd(0xffffffffffffffff, r1, 0x0) executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xb43, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x40, "", [{{0x9, 0x4, 0x0, 0x10, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20003b0000003b0b83efb9302677108120a6ad2a61a54607b71ea9e43d359c479c37f525090000000000000085e8"], 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000) read(r0, &(0x7f0000000500)=""/209, 0xd1) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd70010571fcfb0300120018000180110001006574683a6d6163766c616e3100000000"], 0x2c}, 0x1, 0x300}, 0x8000) mlock(&(0x7f0000653000/0x3000)=nil, 0x3000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000640)='10000', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r4, &(0x7f0000000740)='0', 0x1) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000780)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000f6ffffff8746c13e", @ANYRES32=0x1, @ANYBLOB="0000000000410000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4ffffff0000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0005007e0500000603000003000000fcffffff05010905a10105091901290a150025017501950a8102950175068103c00f2d8eb84f1fa8c3557d8360159e92c0fb3593ed3a964ae4cf679b4ba1a7e3ea60f264d85f"], 0x135) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x9801) move_mount(r1, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0xb) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x3, 0x0, 0x7, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0x56d, 0xe5c7, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x6, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x49, 0xff}}}}}]}}]}}, 0x0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xe5) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000400)={'\x00', 0x6, 0x8, 0x4b8, 0x10001, 0xa6, r4}) write$UHID_INPUT2(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\f\x00\x00\x00g\x000'], 0xc) syz_emit_ethernet(0xb9, &(0x7f0000000080)={@random="e2f4aeef9214", @remote, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@generic={0x3, "5a39d57f8fc894741fde1c7ff691aa91edeff73f2b72370784b06e0abe2a7e72d56babe92787b92eb656a7fe272086345f811e59981359f3197d58be4745d2d10a3efc466d8e7043fafccfff3981fc5a9b703612f6236417aa5a0da9b231389f2c91a11d03c72810466b3100345f15b73471bcaa47526ace0c9460a9c7d7159e086910eb4d4c018122eea3e38a69f8dad2a92418da8d9c265555c5dd311b169de4f8b3ab49d567"}}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x11049100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r5, 0x0, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048010}, 0x40088d5) executing program 3: socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') pread64(r0, &(0x7f0000000040)=""/227, 0xe3, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x5, 0x8, 0x1, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0x2}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x800) r1 = socket(0x840000000002, 0x3, 0x100) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) accept(r3, 0x0, 0x0) connect$inet(r1, &(0x7f0000000580)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f00000005c0), 0x4000095, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) io_uring_setup(0x20006d15, &(0x7f00000007c0)={0x0, 0xcc52, 0x200, 0x80001, 0x10c}) r5 = syz_create_resource$binfmt(0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000880)={'#! ', './file1'}, 0xb) close(0xffffffffffffffff) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {0xe, 0xfff, 0x9, 0x1}, 0x15, [0x28, 0x1, 0x81, 0xf0, 0x7b, 0x1, 0x3, 0x6, 0x4, 0x4, 0x3, 0x4, 0x8, 0x311, 0x2c60, 0x0, 0x6, 0x8001, 0xfffff800, 0x800, 0x8001, 0xfffffffa, 0x0, 0x5, 0x1, 0xfe01, 0x5, 0xfd4, 0x0, 0x2, 0x8ffd, 0x1000, 0x9, 0x7, 0x81, 0x8, 0xffffffff, 0x54, 0x9, 0x9, 0x8, 0x649, 0xfffffff7, 0x9, 0xd, 0x9, 0x5, 0xb, 0x2, 0x1, 0x306f, 0x24, 0xffff0001, 0x80000000, 0x6, 0x2, 0x80000001, 0x101, 0x80, 0xc0000000, 0x80, 0x9, 0x1, 0xcdb1], [0x6, 0xc260, 0x1, 0x6, 0x64b, 0x2, 0x9, 0x4, 0x1, 0x4, 0x7, 0x2, 0x93a, 0x4cc, 0x5, 0xd284, 0x7, 0xffff, 0x8, 0x7, 0xfffffff9, 0x3, 0x4, 0x6, 0x8, 0x2b16, 0xffff, 0x4, 0x7ff, 0x464, 0x0, 0x8, 0x6, 0x5, 0x3, 0x6, 0x0, 0xfffffff8, 0x7, 0xe0000000, 0x1c3, 0x80, 0x6, 0x0, 0x1, 0x12b4, 0x7, 0x1, 0x4, 0x3, 0xd, 0xffffffff, 0x49e7, 0x9, 0x3, 0x3, 0x6, 0x0, 0x8, 0x1, 0x9c0, 0x7, 0x8, 0xd], [0x6, 0x46, 0xfffffff9, 0x8001, 0xfffffff8, 0xa, 0x7f, 0x8, 0x6, 0x923, 0xf, 0x7, 0x1, 0x6, 0xf9c2, 0x80000001, 0x0, 0xeb4ef54, 0x5c77, 0x1, 0xb28, 0x7, 0x7f, 0x0, 0x10, 0x7c, 0x8, 0x401, 0x0, 0x4, 0x5, 0x0, 0x0, 0x2, 0x4, 0x0, 0x6, 0x9, 0x2, 0xc3, 0x4, 0x9, 0x4, 0xa0000, 0xfffffffd, 0x0, 0x5, 0xfffffc01, 0x1, 0x5, 0x101, 0x6, 0x7ff, 0x6, 0x2, 0x1d4, 0xffff0001, 0xf, 0x7ff, 0x3a, 0x21, 0x8000, 0x2, 0xfff], [0xeab, 0x8001, 0x200, 0x3, 0x401, 0x6, 0x9, 0x0, 0x7, 0xff, 0xe3f7, 0x246, 0x7ff, 0x8, 0xfffffffe, 0x7ff, 0x5e59efab, 0x1, 0xddd, 0x2, 0x800, 0x4, 0x10001, 0x4, 0x3, 0x4, 0x6, 0x7, 0x1, 0x5, 0x997, 0x401, 0x0, 0x6, 0xfffff61e, 0xfffffffa, 0x80, 0x7, 0x0, 0x8, 0x1, 0x8, 0x934, 0xcd0, 0x1000, 0x1, 0x0, 0x8, 0x8, 0x6, 0x5, 0x80, 0xff, 0x5, 0x6, 0x29ef, 0x6, 0xc2, 0x6, 0x4, 0x8, 0x339c, 0x7, 0x7]}, 0x45c) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) executing program 33: socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') pread64(r0, &(0x7f0000000040)=""/227, 0xe3, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x5, 0x8, 0x1, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0x2}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x800) r1 = socket(0x840000000002, 0x3, 0x100) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) accept(r3, 0x0, 0x0) connect$inet(r1, &(0x7f0000000580)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f00000005c0), 0x4000095, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) io_uring_setup(0x20006d15, &(0x7f00000007c0)={0x0, 0xcc52, 0x200, 0x80001, 0x10c}) r5 = syz_create_resource$binfmt(0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000880)={'#! ', './file1'}, 0xb) close(0xffffffffffffffff) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {0xe, 0xfff, 0x9, 0x1}, 0x15, [0x28, 0x1, 0x81, 0xf0, 0x7b, 0x1, 0x3, 0x6, 0x4, 0x4, 0x3, 0x4, 0x8, 0x311, 0x2c60, 0x0, 0x6, 0x8001, 0xfffff800, 0x800, 0x8001, 0xfffffffa, 0x0, 0x5, 0x1, 0xfe01, 0x5, 0xfd4, 0x0, 0x2, 0x8ffd, 0x1000, 0x9, 0x7, 0x81, 0x8, 0xffffffff, 0x54, 0x9, 0x9, 0x8, 0x649, 0xfffffff7, 0x9, 0xd, 0x9, 0x5, 0xb, 0x2, 0x1, 0x306f, 0x24, 0xffff0001, 0x80000000, 0x6, 0x2, 0x80000001, 0x101, 0x80, 0xc0000000, 0x80, 0x9, 0x1, 0xcdb1], [0x6, 0xc260, 0x1, 0x6, 0x64b, 0x2, 0x9, 0x4, 0x1, 0x4, 0x7, 0x2, 0x93a, 0x4cc, 0x5, 0xd284, 0x7, 0xffff, 0x8, 0x7, 0xfffffff9, 0x3, 0x4, 0x6, 0x8, 0x2b16, 0xffff, 0x4, 0x7ff, 0x464, 0x0, 0x8, 0x6, 0x5, 0x3, 0x6, 0x0, 0xfffffff8, 0x7, 0xe0000000, 0x1c3, 0x80, 0x6, 0x0, 0x1, 0x12b4, 0x7, 0x1, 0x4, 0x3, 0xd, 0xffffffff, 0x49e7, 0x9, 0x3, 0x3, 0x6, 0x0, 0x8, 0x1, 0x9c0, 0x7, 0x8, 0xd], [0x6, 0x46, 0xfffffff9, 0x8001, 0xfffffff8, 0xa, 0x7f, 0x8, 0x6, 0x923, 0xf, 0x7, 0x1, 0x6, 0xf9c2, 0x80000001, 0x0, 0xeb4ef54, 0x5c77, 0x1, 0xb28, 0x7, 0x7f, 0x0, 0x10, 0x7c, 0x8, 0x401, 0x0, 0x4, 0x5, 0x0, 0x0, 0x2, 0x4, 0x0, 0x6, 0x9, 0x2, 0xc3, 0x4, 0x9, 0x4, 0xa0000, 0xfffffffd, 0x0, 0x5, 0xfffffc01, 0x1, 0x5, 0x101, 0x6, 0x7ff, 0x6, 0x2, 0x1d4, 0xffff0001, 0xf, 0x7ff, 0x3a, 0x21, 0x8000, 0x2, 0xfff], [0xeab, 0x8001, 0x200, 0x3, 0x401, 0x6, 0x9, 0x0, 0x7, 0xff, 0xe3f7, 0x246, 0x7ff, 0x8, 0xfffffffe, 0x7ff, 0x5e59efab, 0x1, 0xddd, 0x2, 0x800, 0x4, 0x10001, 0x4, 0x3, 0x4, 0x6, 0x7, 0x1, 0x5, 0x997, 0x401, 0x0, 0x6, 0xfffff61e, 0xfffffffa, 0x80, 0x7, 0x0, 0x8, 0x1, 0x8, 0x934, 0xcd0, 0x1000, 0x1, 0x0, 0x8, 0x8, 0x6, 0x5, 0x80, 0xff, 0x5, 0x6, 0x29ef, 0x6, 0xc2, 0x6, 0x4, 0x8, 0x339c, 0x7, 0x7]}, 0x45c) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000f6ffffff8746c13e", @ANYRES32=0x1, @ANYBLOB="0000000000000018b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) executing program 0: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) unshare(0x22020600) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, &(0x7f00000025c0)=""/102398, &(0x7f000001b5c0)=0x18ffe) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0xffbffff7, 0xffffffff, 0x1}, 0x10) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000fd3f0000000000000900000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f0000000400), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000440)={0x20000014}) epoll_wait(r4, &(0x7f0000000480)=[{}], 0x1, 0x400) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/4100, 0x1004) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x4000040) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000ac0)={0x8cb, "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"}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000240)=0x1002, 0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000002000000d00000000000f00183400000a180500000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000440)={0x0, 0xf, 0x1, "ed"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000001080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x8, 0x24200) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, &(0x7f00000002c0)={0x20, 0x22, 0xeb, {0xeb, 0x21, "5669c367224f441d849f1dc874d6981fdf93c15d2c92ff32d5cc10f4adc572432a2d87ff04cd40d57621525e8808ff4f47dbb374b19616cd22b818503783d70c0071e0083309d691c82459445b4ae80b0da4c02db4abd9286c524ddbca6d6902f01a44fc02971bf57631066ba294f2ad304afc6dcfe7a3395235ee52a3c0cc447f29cad6e5a06e94719807cf01db62e0157bd977d8eeef95e90c88be3c9a09df823b40245d4e6de5c154d31a6482c244bfc244ab8237efebb27ea38d697ba9c9a671622286d7a1acf3abd4b25aa989f8e5bb8308ea55ad48a68637d7a10773f11c45668ebbfd6972ad"}}, &(0x7f0000000480)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "66fb9b8b4c0742e9f2ccf197843e5b0e385a48bc30bc65f886595bf3aaba89f860ffe0745abb36f20358517ecde72926e5aa1f38bef760a2612a0378360eaff5e797b44ed498a79d088dce469569bb006830f5bb8b11c1907f3ec1afc0e678cf4b39d8efac4c45e0579d49ff14935807bc9ceb43cd0e352ef681cd1a7b45c9e0fcb7f813b730e622688c1fcf1c7da0403a52cd4aed74b53b2abf76f17847224be73a69cbf2e89c78462133be6a9909b9d88a7dafbe96b3aa8cb5117624fef455bcce97f9d22446a214a63e044bbd0af4964e60bc6782"}}}, &(0x7f0000000740)={0x2c, &(0x7f00000005c0)={0x0, 0x30, 0x26, "bb36fefcf5796d5c2c0b06284bfc87f7cde617e7e236fc6b3d6166c8ee7c1237690c9ce40a8d"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000006c0)={0xc0, 0x5, 0x6, "2ea444361736"}, &(0x7f0000000700)={0x40, 0x5, 0x5, "5e75c73377"}}) syz_usb_control_io$printer(r0, 0x0, 0x0) executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000ff8000000000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000030000000000000400000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) executing program 2: symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00') (async) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0xe00008da) (async, rerun: 32) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./bus\x00') (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x40) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480), 0x140, 0x0) r3 = dup(r2) read(r3, &(0x7f00000004c0)=""/189, 0xbd) fadvise64(r3, 0x3, 0x4000000005, 0x4) (async, rerun: 32) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)=0x20000) (async, rerun: 32) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000280)={0x101, 0x3, 0xfd}) (async) ioctl$MEMREAD(r1, 0xc0404d1a, &(0x7f0000000440)={0x8, 0x63, 0xd7, &(0x7f00000002c0)=""/99, &(0x7f0000000340)=""/215, 0x1, '\x00', {0xc3, 0x886, 0x55}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x42) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x3) executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) executing program 2: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) unshare(0x22020600) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, &(0x7f00000025c0)=""/102398, &(0x7f000001b5c0)=0x18ffe) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0xffbffff7, 0xffffffff, 0x1}, 0x10) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000fd3f0000000000000900000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000003c0), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000400), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000440)={0x20000014}) epoll_wait(r2, &(0x7f0000000480)=[{}], 0x1, 0x400) ppoll(&(0x7f00000004c0)=[{r2, 0x401}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$kcm(0x10, 0x2, 0x4) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/4100, 0x1004) executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) keyctl$dh_compute(0x17, &(0x7f0000000980), 0x0, 0x0, &(0x7f00000009c0)={0x0}) r3 = syz_open_dev$sndctrl(&(0x7f0000000a00), 0x84, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0485510, &(0x7f0000000a40)={0x0, 0x1, 0x1, 0x0, &(0x7f0000000ac0)=[{}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000b40)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0x1, 0x0, 0x2, 0x4, 0x0, 0x7, 0x8004, 0xa, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000b80)='X', 0x34000, 0x0, &(0x7f0000000bc0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000c00)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000cc0)={{0x0, 0xeeee0000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x5, 0x9, 0x10}, {0xffff1000, 0x200000, 0xd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x7}, {0x2000, 0x5000, 0xc, 0xff, 0x4, 0x4, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6, 0xfc}, {0x6000, 0xfffef001, 0x9, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x83}, {0xdddd0000, 0xb000, 0x0, 0x35, 0x3, 0x0, 0x42, 0x0, 0x0, 0x0, 0x3}, {0xeeef0000, 0xe6e31000, 0x8, 0xfe, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x30000, 0x2000, 0xf, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26, 0x0, 0x0, 0x1}, {0x80a0000, 0x807}, {0x7000}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0xfffffffffffffffc, 0x0, 0x0, [0x0, 0xe4, 0x1, 0x40]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000740), 0x8, 0x10, &(0x7f0000000780), 0x3f}, 0x16) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r5) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000e40)={'syzkaller0\x00', 0x1}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=@newtfilter={0x74, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1, 0xf}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xf, 0x800, 0x5, 0xf738, {0xb, 0x2, 0x0, 0x2, 0x200, 0x1}, {0x2, 0x1, 0x1, 0x0, 0xffff}, 0xd8, 0xeb}}]}]}}]}, 0x74}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000840)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x8004) executing program 4: unshare(0x6020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000002c0)={0x3, 0x0, 0xfffff3a2}) executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80001001300100000000000fbdbdf25fc000000000000000000000000000000fc000000000000000000000000000001000000044e2400000a0060203b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0xfffffffffffffdee, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x40000001}, 0x24004000) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000ffffff8000000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc01000000000000000080ff00000000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) (async) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001740)={{r0}, r1, 0x18, @inherit={0x98, &(0x7f00000003c0)={0x1, 0xa, 0xef, 0x3, {0x0, 0x7, 0x1, 0x8000000000000000, 0x6}, [0x48c9, 0x4, 0xc010, 0xfffffffffffffffc, 0x1000, 0x5c8d, 0x9, 0x8001, 0x1, 0xff]}}, @subvolid=0x2}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001740)={{r0}, r1, 0x18, @inherit={0x98, &(0x7f00000003c0)={0x1, 0xa, 0xef, 0x3, {0x0, 0x7, 0x1, 0x8000000000000000, 0x6}, [0x48c9, 0x4, 0xc010, 0xfffffffffffffffc, 0x1000, 0x5c8d, 0x9, 0x8001, 0x1, 0xff]}}, @subvolid=0x2}) poll(0x0, 0x0, 0x2) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) (async) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044402, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000001c0)={0x0, 0x0, 0x10001, 0x5}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000000700)={0xc, {"a2e3ad2107c752f91b25470987f70e06d038e7ff7fc6e5539b3264078b089b3b083468060890e0878f0e1ac6e70a9b3365959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31350d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7dafbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85800056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dab54c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10746fc4090ac97b77e4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f5f71d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc07d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810930500ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab974c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc660db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d154d8a5ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21e5ec68cb068ea88067d905ea917bb03eefdaebdeabf2c0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x104a) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0002003c0001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010400028005000100010000003c000380"], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000003f0026012bbd700000000000117c00000400fc800c00018055fd0400", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000140007000001000000000000000000000000000100009d00", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) executing program 0: syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8a16, 0x3a10, 0x3, 0x31d}, &(0x7f0000000500), &(0x7f0000000580), &(0x7f0000000180)) syz_clone(0x100111, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) r0 = eventfd(0x0) io_submit(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xc2, r0, &(0x7f0000000140)="0100fd6400000000", 0x8, 0x36, 0x0, 0x0, r0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001701000001e500000000d8936e75a545998a2db3c561ef65a300000000000018000000000000001701000004000000fffbffff00000000"], 0x30, 0x40}], 0x1, 0x40800) executing program 6: unshare(0x6020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000002c0)={0x3, 0x0, 0xfffff3a2}) executing program 6: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) read(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r9, 0x80000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000cc0)) lseek(r0, 0x0, 0x3) r10 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) r11 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x10, 0x81, 0x80, 0x4}, {0x9, 0x5, 0xe, 0x2, 0x10, 0xd, 0xa, 0x9}, {0x9, 0x5, 0x9, 0x3, 0x20, 0x0, 0x0, 0xfd}}}}}}]}}, 0x0) syz_usb_ep_write(r11, 0x7, 0x9, &(0x7f0000000300)="39151cdff086a4bbcb") executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r2, @ANYBLOB="5c005a80140001800500070001000000050006000100000044000380120001000c"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000000c0)="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") r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0x3}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffe0f, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r8 = socket$inet6(0xa, 0x2, 0x0) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f0000008880), 0x45b, 0x2, 0x0) unshare(0x62020400) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r9, 0x0, 0x5, &(0x7f0000000240)={@loopback, @multicast2, 0xfffb, "66c5aff8a7eb17f1f6cec2e7780795478c84aea31700", 0x96bf, 0x2, 0x7a, 0x6b}, 0x3c) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000000), 0x4) socket(0x10, 0x3, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4001010) executing program 2: madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r0, &(0x7f0000000740)='0', 0x1) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\t/'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000780)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000020a09040000000000000000020000000900010073797a3000000000090001e173797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0x74}, 0x1, 0xf5ffffff}, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x80000000000000a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) epoll_create(0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309180008000a00", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800070008000000062102000100000008000500", @ANYRES16=r0], 0x54}, 0x1, 0x0, 0x5000000, 0x24004845}, 0x8000002) executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000ffffff800000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) executing program 5: r0 = syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000500)=ANY=[@ANYBLOB="120110030000004035120182400001020301090286080000003009080b00010107208c0904000000010120000924010040041d000708240a0001ff23030c240302"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="004e82a3adfc8c4409e6f5030400000004034308"], 0x0, 0x0, 0x0}, 0x0) executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'team0\x00', 0x1}, 0x18) close(0x3) r1 = syz_open_dev$sndpcmc(&(0x7f0000000540), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f00000009c0)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000c40)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1c79, &(0x7f0000000d00)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000e40)=0x7) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000020000008520000004000000184a00000200000000000000000000007c94000010000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r6, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x80}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2f}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x4}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x4880) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000180)) executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001701000001e500000000d8936e75a545998a2db3c561ef65a300000000000018000000000000001701000004000000fffbffff00000000"], 0x30, 0x40}], 0x1, 0x40800) executing program 6: unshare(0x6020400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000200)={0x4004, r0, 0x2}) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, 0x0) executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x12, 0x0, {0xc, 0xd}, {0xc, 0x5}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048810}, 0x2000000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f00000005c0)={0xdf, 0x0, 0x80000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x4, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001b80)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0x270, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) mprotect(&(0x7f0000e15000/0x2000)=nil, 0x2000, 0x2) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000001f80)={'ip6_vti0\x00', &(0x7f0000001fc0)=@ethtool_cmd={0x41, 0x5, 0x3, 0x0, 0x7, 0x0, 0x0, 0xfc, 0x0, 0xfc, 0x0, 0xfffffff9, 0x0, 0xff, 0x0, 0x45, [0x0, 0x6]}}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f0000019100400014000200100011"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000100)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000240)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x1, 0x5f6, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x24}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_open_dev$media(&(0x7f00000003c0), 0x6be, 0xc8683) ioctl$MEDIA_IOC_REQUEST_ALLOC(r10, 0x80047c05, &(0x7f0000000480)) r11 = dup(r9) syz_ublk_setup_queues(r11, r8, &(0x7f0000000340)={0x0, 0x20fb87, 0x1, 0xfffffffd, 0x32c}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xba5e, 0x8000, 0x1006, 0x160, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6605, 0x200, 0x10000000, 0x546}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88db, 0x10000, 0x3, 0xfffffffc, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000000, 0x8000, 0x2, 0xbd, 0x0, r3}}], 0x1, &(0x7f0000000540)={0x2e, 0x54, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r7, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) ioctl$MEMREADOOB(r11, 0xc0104d04, &(0x7f0000000500)={0x6, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_modify_offsets$flags(r4, r12, 0x38, 0xfffffffa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x14) syz_usb_connect(0x3, 0x96d, &(0x7f0000000a80)=ANY=[@ANYBLOB="12010102e21b5140b1134200e8a90102030109025b09040d9720090904320409f073ea09090503002000f80040090504104000"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r11, 0x7b2, &(0x7f0000001b40)={&(0x7f0000000b40)=[0x5, 0xaa4, 0xdb, 0x7, 0xd, 0x800, 0x401, 0xf, 0x4, 0x6, 0x800, 0x40, 0x6, 0x4, 0xfffffffe, 0x40d, 0xff, 0x1, 0xc6, 0x100, 0x6, 0x3, 0x80000001, 0xbfb, 0x2, 0x6, 0x8, 0x6, 0x5, 0x64fe2241, 0x6, 0x5, 0x8, 0x8, 0x8b, 0x2, 0x69, 0x3, 0x6, 0xadb433a, 0x10000, 0xffff96d0, 0x0, 0x0, 0x0, 0x2, 0x1000, 0x401, 0x5, 0x0, 0x8001, 0x400, 0x2, 0x5, 0x80, 0x400, 0x5, 0x9, 0x80000001, 0x10001, 0x9, 0x4, 0x8000, 0x7, 0x1, 0x7, 0xffff8000, 0xfffffff7, 0x5, 0x6, 0x0, 0x1, 0xfffffffc, 0x7, 0x7ff, 0x8000, 0x4, 0x2, 0x6, 0x0, 0x2, 0x2, 0x86b, 0x3, 0x5, 0x65c8049d, 0x8, 0x8, 0x6, 0x2, 0xe1, 0x9, 0x6, 0x4, 0x0, 0x3, 0x5, 0x101, 0x9, 0x3, 0x0, 0x0, 0x2, 0x3, 0x3, 0x80000001, 0x5664, 0x80, 0x75, 0x3, 0x8, 0xee, 0x8000, 0x1, 0x10000, 0x7f, 0xa4c, 0x5, 0x80, 0xb, 0x8, 0xb, 0xd, 0xfffffffe, 0x9, 0x1432, 0x0, 0x0, 0x6, 0x1, 0xdb71, 0xffff, 0x4, 0x101, 0x3, 0xc3b9, 0x1, 0x2, 0xb1e4, 0x9, 0x3, 0xe, 0x80000001, 0x8, 0x401, 0x1, 0x7, 0x2, 0x385, 0xde, 0xab84, 0xde, 0x8001, 0x7, 0x7, 0x8000, 0x9, 0x2, 0x2, 0x9, 0x2, 0x5, 0x9, 0x0, 0x6, 0x2, 0x5, 0x81, 0x1000, 0x7, 0x4, 0x40, 0x2, 0x8, 0x10000, 0x9, 0xfffffffe, 0x2, 0xfffffffb, 0x5, 0x1, 0x1, 0x10, 0x2549, 0x5, 0x200, 0x0, 0xeb2, 0x3, 0x2, 0x2, 0xc, 0x6, 0x3ff, 0xffffe3dc, 0x2, 0x9, 0x8, 0xffffdd5e, 0x80, 0xfff, 0x2, 0x1, 0x0, 0x200, 0xe48d, 0xfffff8ee, 0xb1, 0x81, 0xeb, 0x3, 0x0, 0x1, 0x80000001, 0x5, 0x1ff, 0x7, 0x7, 0x5, 0x2, 0x6a38bf39, 0x6, 0x7ff, 0x1bb800, 0x7, 0x5, 0x4, 0x3ff, 0x81, 0x8000, 0x7f, 0x66, 0xffffffff, 0x80, 0x9, 0x0, 0x226a, 0x8, 0x4, 0x790, 0x0, 0xffff8001, 0x8f, 0xbbf, 0x5, 0xffff, 0x9, 0xb83, 0x5, 0x0, 0x6, 0x4, 0x3b, 0x2, 0x8001, 0x8, 0xb9e, 0x6, 0x3, 0x0, 0x9, 0x6, 0x3, 0xfffffff9, 0x7ff, 0x100, 0x0, 0x81, 0x3ff, 0x8, 0x400, 0x9, 0x4, 0x7, 0x8, 0x6, 0x11, 0x1, 0xfffffffd, 0x5, 0xe7cb, 0x3, 0x5, 0xc, 0xff, 0x400, 0x4, 0xb30, 0xe4, 0x7fffffff, 0x9, 0x7, 0xa, 0x1afa, 0x2, 0x6, 0x2, 0x6, 0x1, 0x5, 0x9, 0x2, 0x8001, 0xe, 0x1, 0xfffffffe, 0x2, 0x0, 0x7, 0x66, 0xfffffffa, 0x5, 0x6, 0xe, 0x4, 0x2, 0xe38, 0x3, 0x80, 0xdb23, 0x1, 0x6456, 0x6000000, 0x8, 0xffff, 0x9, 0x0, 0x8d, 0x56, 0xb, 0x2, 0x4, 0x7ff, 0x8, 0x0, 0x9, 0x2f, 0x7, 0x1, 0x1, 0x3, 0x4, 0x4, 0x80, 0x4, 0x9, 0x3, 0xffffff5b, 0x5, 0x48f, 0x7, 0x0, 0xb753, 0xb7a6, 0xfff, 0x2, 0x9, 0x9, 0x6, 0x3, 0x4, 0x20, 0xe223, 0x80, 0x5, 0xfffffffe, 0x1, 0xfffffffb, 0x100, 0x3, 0x115d, 0xfffffff9, 0x5, 0x2, 0x5, 0x7, 0x6236a69d, 0x1, 0xffffffff, 0x0, 0x0, 0x1, 0x8c, 0x4, 0x8, 0xc, 0x77, 0x9, 0xf, 0x6, 0x1d7, 0x6, 0x9, 0xffffffff, 0x7, 0xf2, 0x5, 0x9, 0x3, 0x3, 0x9, 0x0, 0xc, 0x1, 0x3, 0x1, 0x2, 0x3, 0x1, 0xe0, 0x6, 0x9, 0x9, 0x7, 0x7fff, 0x80000001, 0xa429, 0x6, 0xf20, 0x7fffffff, 0x8, 0x2, 0x0, 0x100, 0x6, 0x7, 0x7, 0x6, 0x7, 0x6, 0x8, 0x8, 0x6, 0x7, 0x0, 0xc06, 0x9, 0xf0, 0x6, 0x7ff, 0xe00, 0x12a4, 0x0, 0x3, 0x8ae0, 0xffffffe7, 0x2, 0x4, 0x9, 0x0, 0x80, 0x10001, 0x7, 0x4, 0x8, 0x4, 0x5, 0x4, 0x4, 0x4, 0xf3, 0xfffffffe, 0x5, 0x0, 0xe22, 0x67, 0x7, 0x0, 0x6, 0x2, 0x1, 0x1, 0x9, 0x4, 0x4d, 0x0, 0x0, 0x55, 0x8000, 0xfd, 0xfffffff7, 0x9, 0x10001, 0x10000, 0x81e, 0xaaa0, 0x3, 0xc60, 0x88, 0x10a6, 0x8, 0xef9f, 0x7, 0x7fff, 0x5, 0x6, 0x8e8, 0x200, 0x0, 0x7ff, 0x0, 0x3, 0x100, 0x1, 0x2, 0x2, 0x0, 0x6, 0x0, 0x5cb6, 0x5, 0x0, 0x7e64, 0x0, 0x3, 0x5, 0x9, 0x254, 0xb86, 0x1ab2e81, 0x30ba, 0xb772, 0xd, 0x6, 0x5, 0x8000, 0x0, 0x0, 0x1, 0x2, 0x67db375a, 0x7fff, 0x80000001, 0x4, 0x9, 0x5, 0x8, 0x3, 0xb00e, 0xf0b, 0x833, 0x5b, 0x3, 0x40, 0x80000001, 0xb, 0x4, 0x2, 0x0, 0x9, 0xf, 0x6, 0x200, 0x1, 0x5, 0x6, 0x7, 0x1ff, 0x8, 0x18, 0xc90, 0x6, 0x0, 0x8, 0x9, 0x800, 0x3, 0x7, 0x1000, 0xc, 0x6, 0x7, 0xfff, 0x9, 0x7fff8000, 0x1, 0xff800000, 0xca, 0x6, 0x3, 0x2, 0x8, 0x5, 0x5, 0xfffffffe, 0x10001, 0x400, 0x3, 0xffffffae, 0x4, 0x3, 0x7, 0x2, 0x9, 0xfffffbff, 0x0, 0x0, 0x4, 0x4, 0x3, 0x5, 0x7, 0x0, 0x1, 0x7, 0x8, 0x7, 0x5, 0x5, 0x404, 0x8, 0x7, 0x9, 0x5, 0x4d1, 0x6, 0x80000000, 0x5, 0x9f, 0x4, 0xfffffff8, 0x7ff, 0x2, 0x40000000, 0xc3, 0xa293, 0x2, 0x9, 0xd, 0x8, 0x3, 0x1fed, 0x8, 0x1, 0x9, 0x3, 0x1, 0xb0, 0x5, 0x42d, 0xfffffff9, 0x4, 0x8001, 0x51, 0x80, 0x6, 0x6, 0x100, 0x0, 0x7, 0x93dd, 0x6, 0x13, 0x81, 0x8, 0x81, 0x2b, 0x0, 0x5, 0x2, 0x2, 0xc3c, 0x4, 0x2, 0x9, 0x4, 0x6, 0x2, 0x8, 0x2, 0x3b, 0x5, 0x0, 0x5, 0x6, 0xf, 0x37, 0xffff, 0xb9, 0xca12, 0x324bc677, 0x0, 0x9, 0xffff, 0xf5, 0x7ff, 0x40, 0x101, 0x0, 0x8, 0x400, 0xbd, 0x0, 0x5, 0x1, 0x3, 0x80, 0x800, 0x4, 0x7f, 0x1, 0x8, 0x7, 0x2, 0x0, 0x6, 0xfffffffa, 0x8, 0xff6, 0x8000000, 0x9, 0x6, 0x8, 0x6, 0x0, 0x4, 0x5, 0x4, 0x0, 0x138a, 0x0, 0x7f, 0x0, 0xfffffff8, 0x1, 0x0, 0x6, 0x2, 0x6, 0x8f, 0x5, 0x3a, 0x8, 0xc0, 0x6a3b, 0x2, 0xffffff86, 0x35, 0x2, 0x8, 0x4, 0xa, 0x2, 0x1, 0x7f000, 0x8, 0x449, 0x9, 0x200, 0x8, 0x86, 0x4, 0x800, 0x4, 0xffff, 0x8, 0x2, 0x5, 0x9, 0x200, 0x6, 0x67, 0xffffffff, 0xfff, 0x3, 0x8, 0x8000, 0x2, 0x12a, 0x8, 0x6, 0x8, 0x25, 0x5, 0x38, 0x5, 0x8, 0x4, 0x39, 0x9745, 0xa2a, 0x81, 0x7, 0x6, 0x4, 0x4, 0xfffffff7, 0x516f, 0x8, 0x1, 0x400, 0x3ff, 0x360, 0x2b0c2d27, 0x0, 0x2, 0x101, 0x12, 0x3, 0xdea, 0x3, 0x6a, 0x1ff, 0x2, 0x6, 0xfffffff8, 0x8001, 0x5, 0x401, 0x2, 0x2, 0x0, 0x1, 0x0, 0x200, 0x10, 0x9, 0x9, 0x3, 0x3, 0x1, 0x3, 0xd, 0x2e0, 0x401, 0x8000, 0x0, 0xae, 0x4, 0x4, 0x6, 0x9f58, 0x9, 0x8, 0x1, 0x2, 0x9, 0x8, 0x2, 0x9, 0x2, 0x20, 0x4, 0xf, 0x401, 0x1, 0x401, 0x3, 0x0, 0x3, 0xc, 0x800, 0x28000000, 0x3, 0x5af9, 0x0, 0xb6c, 0x8, 0xb907, 0x4, 0x7, 0xffff2d21, 0x485, 0x1000, 0x6, 0x4, 0x1, 0x81, 0x2, 0xbd1e, 0x6, 0x33, 0xd, 0x80, 0x8, 0xf9, 0x7fffffff, 0x10001, 0x11, 0x1, 0xe, 0x0, 0x4, 0x9, 0xffffffff, 0x7, 0x9, 0x5, 0x7f1f, 0x7, 0x7, 0x8, 0x3, 0x7, 0xc, 0x7, 0x3, 0x0, 0x2, 0x40, 0xd, 0x9, 0x9, 0x200, 0x40, 0x31cc, 0xffff56d2, 0x20000000, 0xfff, 0x9, 0x5, 0x5, 0xfffffff9, 0x0, 0xff, 0x100, 0x3, 0x6, 0x0, 0x8b, 0x200, 0x80, 0x2, 0xffff, 0x8001, 0xd8c7378, 0x1, 0x4, 0x0, 0x5, 0x3, 0x3, 0x1, 0xdc5e, 0x0, 0x4, 0x3b, 0xffff, 0x1, 0xffffffff, 0xffff, 0x1, 0x400, 0x0, 0x2, 0x5, 0x1000, 0x8000, 0xfffffeff, 0x620a, 0x5, 0x2, 0x0, 0x8, 0x4, 0xdc, 0x2, 0xe, 0x7, 0x140000, 0xfffffff7, 0x1ff, 0x0, 0xb, 0xfd, 0xdd18, 0x0, 0x1, 0x40, 0x5, 0x7c43, 0x4, 0x2c, 0xffff, 0x8, 0x6, 0x200, 0x9, 0xffff, 0x9f, 0x6, 0x3, 0x100, 0x2, 0x9, 0x2, 0x9, 0x1, 0x100, 0x7, 0x5, 0xe, 0x24, 0x8001, 0x6, 0x8000, 0x3, 0xf2, 0x2, 0x1, 0x10001, 0xdeca, 0x4, 0xea, 0x6, 0x3, 0x8, 0x7ff, 0x9, 0x0, 0x8, 0x5b, 0x9, 0x4, 0xff, 0xbf02, 0x2e90a212, 0x40000c, 0x8, 0x20000000, 0x6, 0xffff, 0xfffff801, 0x2], 0x2, 0x400, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000b00)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x16b8c5b5213a03b5}) executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x2, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x298) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: bisecting 44 programs bisect: split chunks (needed=false): <44> bisect: split chunk #0 of len 44 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 24, 2, 2, 19, 1, 24, 30, 5, 10, 2, 28, 5, 6, 4, 5, 30, 30, 9, 4, 14, 2, 1, 2, 23, 4, 5, 28, 2] detailed listing: executing program 0: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) unshare(0x22020600) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, &(0x7f00000025c0)=""/102398, &(0x7f000001b5c0)=0x18ffe) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0xffbffff7, 0xffffffff, 0x1}, 0x10) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000fd3f0000000000000900000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f0000000400), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000440)={0x20000014}) epoll_wait(r4, &(0x7f0000000480)=[{}], 0x1, 0x400) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/4100, 0x1004) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x4000040) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000ac0)={0x8cb, "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"}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000240)=0x1002, 0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000002000000d00000000000f00183400000a180500000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000440)={0x0, 0xf, 0x1, "ed"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000001080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x8, 0x24200) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, &(0x7f00000002c0)={0x20, 0x22, 0xeb, {0xeb, 0x21, "5669c367224f441d849f1dc874d6981fdf93c15d2c92ff32d5cc10f4adc572432a2d87ff04cd40d57621525e8808ff4f47dbb374b19616cd22b818503783d70c0071e0083309d691c82459445b4ae80b0da4c02db4abd9286c524ddbca6d6902f01a44fc02971bf57631066ba294f2ad304afc6dcfe7a3395235ee52a3c0cc447f29cad6e5a06e94719807cf01db62e0157bd977d8eeef95e90c88be3c9a09df823b40245d4e6de5c154d31a6482c244bfc244ab8237efebb27ea38d697ba9c9a671622286d7a1acf3abd4b25aa989f8e5bb8308ea55ad48a68637d7a10773f11c45668ebbfd6972ad"}}, &(0x7f0000000480)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "66fb9b8b4c0742e9f2ccf197843e5b0e385a48bc30bc65f886595bf3aaba89f860ffe0745abb36f20358517ecde72926e5aa1f38bef760a2612a0378360eaff5e797b44ed498a79d088dce469569bb006830f5bb8b11c1907f3ec1afc0e678cf4b39d8efac4c45e0579d49ff14935807bc9ceb43cd0e352ef681cd1a7b45c9e0fcb7f813b730e622688c1fcf1c7da0403a52cd4aed74b53b2abf76f17847224be73a69cbf2e89c78462133be6a9909b9d88a7dafbe96b3aa8cb5117624fef455bcce97f9d22446a214a63e044bbd0af4964e60bc6782"}}}, &(0x7f0000000740)={0x2c, &(0x7f00000005c0)={0x0, 0x30, 0x26, "bb36fefcf5796d5c2c0b06284bfc87f7cde617e7e236fc6b3d6166c8ee7c1237690c9ce40a8d"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000006c0)={0xc0, 0x5, 0x6, "2ea444361736"}, &(0x7f0000000700)={0x40, 0x5, 0x5, "5e75c73377"}}) syz_usb_control_io$printer(r0, 0x0, 0x0) executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000ff8000000000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000030000000000000400000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) executing program 2: symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00') (async) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0xe00008da) (async, rerun: 32) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./bus\x00') (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x40) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480), 0x140, 0x0) r3 = dup(r2) read(r3, &(0x7f00000004c0)=""/189, 0xbd) fadvise64(r3, 0x3, 0x4000000005, 0x4) (async, rerun: 32) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)=0x20000) (async, rerun: 32) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000280)={0x101, 0x3, 0xfd}) (async) ioctl$MEMREAD(r1, 0xc0404d1a, &(0x7f0000000440)={0x8, 0x63, 0xd7, &(0x7f00000002c0)=""/99, &(0x7f0000000340)=""/215, 0x1, '\x00', {0xc3, 0x886, 0x55}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x42) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x3) executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000fffffff07f000000000000005504000001ed0a002500000017ff2000dd40000000000000730a13fe000000003e04000000000000e5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800d9b3a69b37caa964e4b7000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325a904514d8e90131bfc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f49e4dcc1b7af0b51b9cafeda067b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb860600911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b30e55ac1275e938706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff0492df6b53002514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa250bc93b233a2291b5b10eebc49b6882f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753446de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000010000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468db"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) executing program 2: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) unshare(0x22020600) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, &(0x7f00000025c0)=""/102398, &(0x7f000001b5c0)=0x18ffe) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0xffbffff7, 0xffffffff, 0x1}, 0x10) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000fd3f0000000000000900000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000003c0), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000400), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000440)={0x20000014}) epoll_wait(r2, &(0x7f0000000480)=[{}], 0x1, 0x400) ppoll(&(0x7f00000004c0)=[{r2, 0x401}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$kcm(0x10, 0x2, 0x4) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/4100, 0x1004) executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) keyctl$dh_compute(0x17, &(0x7f0000000980), 0x0, 0x0, &(0x7f00000009c0)={0x0}) r3 = syz_open_dev$sndctrl(&(0x7f0000000a00), 0x84, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0485510, &(0x7f0000000a40)={0x0, 0x1, 0x1, 0x0, &(0x7f0000000ac0)=[{}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000b40)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0x1, 0x0, 0x2, 0x4, 0x0, 0x7, 0x8004, 0xa, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000b80)='X', 0x34000, 0x0, &(0x7f0000000bc0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000c00)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000cc0)={{0x0, 0xeeee0000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x5, 0x9, 0x10}, {0xffff1000, 0x200000, 0xd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x7}, {0x2000, 0x5000, 0xc, 0xff, 0x4, 0x4, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6, 0xfc}, {0x6000, 0xfffef001, 0x9, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x83}, {0xdddd0000, 0xb000, 0x0, 0x35, 0x3, 0x0, 0x42, 0x0, 0x0, 0x0, 0x3}, {0xeeef0000, 0xe6e31000, 0x8, 0xfe, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x30000, 0x2000, 0xf, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26, 0x0, 0x0, 0x1}, {0x80a0000, 0x807}, {0x7000}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0xfffffffffffffffc, 0x0, 0x0, [0x0, 0xe4, 0x1, 0x40]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000740), 0x8, 0x10, &(0x7f0000000780), 0x3f}, 0x16) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r5) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000e40)={'syzkaller0\x00', 0x1}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=@newtfilter={0x74, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1, 0xf}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xf, 0x800, 0x5, 0xf738, {0xb, 0x2, 0x0, 0x2, 0x200, 0x1}, {0x2, 0x1, 0x1, 0x0, 0xffff}, 0xd8, 0xeb}}]}]}}]}, 0x74}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000840)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x8004) executing program 4: unshare(0x6020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000002c0)={0x3, 0x0, 0xfffff3a2}) executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80001001300100000000000fbdbdf25fc000000000000000000000000000000fc000000000000000000000000000001000000044e2400000a0060203b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0xfffffffffffffdee, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x40000001}, 0x24004000) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000ffffff8000000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc01000000000000000080ff00000000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) (async) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001740)={{r0}, r1, 0x18, @inherit={0x98, &(0x7f00000003c0)={0x1, 0xa, 0xef, 0x3, {0x0, 0x7, 0x1, 0x8000000000000000, 0x6}, [0x48c9, 0x4, 0xc010, 0xfffffffffffffffc, 0x1000, 0x5c8d, 0x9, 0x8001, 0x1, 0xff]}}, @subvolid=0x2}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001740)={{r0}, r1, 0x18, @inherit={0x98, &(0x7f00000003c0)={0x1, 0xa, 0xef, 0x3, {0x0, 0x7, 0x1, 0x8000000000000000, 0x6}, [0x48c9, 0x4, 0xc010, 0xfffffffffffffffc, 0x1000, 0x5c8d, 0x9, 0x8001, 0x1, 0xff]}}, @subvolid=0x2}) poll(0x0, 0x0, 0x2) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) (async) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044402, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000001c0)={0x0, 0x0, 0x10001, 0x5}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000000700)={0xc, {"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", 0x1000}}, 0x104a) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0002003c0001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010400028005000100010000003c000380"], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000003f0026012bbd700000000000117c00000400fc800c00018055fd0400", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000140007000001000000000000000000000000000100009d00", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) executing program 0: syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8a16, 0x3a10, 0x3, 0x31d}, &(0x7f0000000500), &(0x7f0000000580), &(0x7f0000000180)) syz_clone(0x100111, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) r0 = eventfd(0x0) io_submit(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xc2, r0, &(0x7f0000000140)="0100fd6400000000", 0x8, 0x36, 0x0, 0x0, r0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001701000001e500000000d8936e75a545998a2db3c561ef65a300000000000018000000000000001701000004000000fffbffff00000000"], 0x30, 0x40}], 0x1, 0x40800) executing program 6: unshare(0x6020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000002c0)={0x3, 0x0, 0xfffff3a2}) executing program 6: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) read(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r9, 0x80000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000cc0)) lseek(r0, 0x0, 0x3) r10 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) r11 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x10, 0x81, 0x80, 0x4}, {0x9, 0x5, 0xe, 0x2, 0x10, 0xd, 0xa, 0x9}, {0x9, 0x5, 0x9, 0x3, 0x20, 0x0, 0x0, 0xfd}}}}}}]}}, 0x0) syz_usb_ep_write(r11, 0x7, 0x9, &(0x7f0000000300)="39151cdff086a4bbcb") executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r2, @ANYBLOB="5c005a80140001800500070001000000050006000100000044000380120001000c"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000000c0)="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") r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0x3}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffe0f, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r8 = socket$inet6(0xa, 0x2, 0x0) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f0000008880), 0x45b, 0x2, 0x0) unshare(0x62020400) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r9, 0x0, 0x5, &(0x7f0000000240)={@loopback, @multicast2, 0xfffb, "66c5aff8a7eb17f1f6cec2e7780795478c84aea31700", 0x96bf, 0x2, 0x7a, 0x6b}, 0x3c) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000000), 0x4) socket(0x10, 0x3, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4001010) executing program 2: madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r0, &(0x7f0000000740)='0', 0x1) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\t/'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000780)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000020a09040000000000000000020000000900010073797a3000000000090001e173797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0x74}, 0x1, 0xf5ffffff}, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x80000000000000a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) epoll_create(0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309180008000a00", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800070008000000062102000100000008000500", @ANYRES16=r0], 0x54}, 0x1, 0x0, 0x5000000, 0x24004845}, 0x8000002) executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000ffffff800000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) executing program 5: r0 = syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000500)=ANY=[@ANYBLOB="120110030000004035120182400001020301090286080000003009080b00010107208c0904000000010120000924010040041d000708240a0001ff23030c240302"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="004e82a3adfc8c4409e6f5030400000004034308"], 0x0, 0x0, 0x0}, 0x0) executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'team0\x00', 0x1}, 0x18) close(0x3) r1 = syz_open_dev$sndpcmc(&(0x7f0000000540), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f00000009c0)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000c40)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1c79, &(0x7f0000000d00)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000e40)=0x7) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000020000008520000004000000184a00000200000000000000000000007c94000010000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r6, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x80}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2f}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x4}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x4880) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000180)) executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001701000001e500000000d8936e75a545998a2db3c561ef65a300000000000018000000000000001701000004000000fffbffff00000000"], 0x30, 0x40}], 0x1, 0x40800) executing program 6: unshare(0x6020400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000200)={0x4004, r0, 0x2}) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, 0x0) executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x12, 0x0, {0xc, 0xd}, {0xc, 0x5}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048810}, 0x2000000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f00000005c0)={0xdf, 0x0, 0x80000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x4, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001b80)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0x270, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) mprotect(&(0x7f0000e15000/0x2000)=nil, 0x2000, 0x2) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000001f80)={'ip6_vti0\x00', &(0x7f0000001fc0)=@ethtool_cmd={0x41, 0x5, 0x3, 0x0, 0x7, 0x0, 0x0, 0xfc, 0x0, 0xfc, 0x0, 0xfffffff9, 0x0, 0xff, 0x0, 0x45, [0x0, 0x6]}}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f0000019100400014000200100011"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000100)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000240)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x1, 0x5f6, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x24}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_open_dev$media(&(0x7f00000003c0), 0x6be, 0xc8683) ioctl$MEDIA_IOC_REQUEST_ALLOC(r10, 0x80047c05, &(0x7f0000000480)) r11 = dup(r9) syz_ublk_setup_queues(r11, r8, &(0x7f0000000340)={0x0, 0x20fb87, 0x1, 0xfffffffd, 0x32c}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xba5e, 0x8000, 0x1006, 0x160, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6605, 0x200, 0x10000000, 0x546}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88db, 0x10000, 0x3, 0xfffffffc, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000000, 0x8000, 0x2, 0xbd, 0x0, r3}}], 0x1, &(0x7f0000000540)={0x2e, 0x54, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r7, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) ioctl$MEMREADOOB(r11, 0xc0104d04, &(0x7f0000000500)={0x6, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_modify_offsets$flags(r4, r12, 0x38, 0xfffffffa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x14) syz_usb_connect(0x3, 0x96d, &(0x7f0000000a80)=ANY=[@ANYBLOB="12010102e21b5140b1134200e8a90102030109025b09040d9720090904320409f073ea09090503002000f80040090504104000"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r11, 0x7b2, &(0x7f0000001b40)={&(0x7f0000000b40)=[0x5, 0xaa4, 0xdb, 0x7, 0xd, 0x800, 0x401, 0xf, 0x4, 0x6, 0x800, 0x40, 0x6, 0x4, 0xfffffffe, 0x40d, 0xff, 0x1, 0xc6, 0x100, 0x6, 0x3, 0x80000001, 0xbfb, 0x2, 0x6, 0x8, 0x6, 0x5, 0x64fe2241, 0x6, 0x5, 0x8, 0x8, 0x8b, 0x2, 0x69, 0x3, 0x6, 0xadb433a, 0x10000, 0xffff96d0, 0x0, 0x0, 0x0, 0x2, 0x1000, 0x401, 0x5, 0x0, 0x8001, 0x400, 0x2, 0x5, 0x80, 0x400, 0x5, 0x9, 0x80000001, 0x10001, 0x9, 0x4, 0x8000, 0x7, 0x1, 0x7, 0xffff8000, 0xfffffff7, 0x5, 0x6, 0x0, 0x1, 0xfffffffc, 0x7, 0x7ff, 0x8000, 0x4, 0x2, 0x6, 0x0, 0x2, 0x2, 0x86b, 0x3, 0x5, 0x65c8049d, 0x8, 0x8, 0x6, 0x2, 0xe1, 0x9, 0x6, 0x4, 0x0, 0x3, 0x5, 0x101, 0x9, 0x3, 0x0, 0x0, 0x2, 0x3, 0x3, 0x80000001, 0x5664, 0x80, 0x75, 0x3, 0x8, 0xee, 0x8000, 0x1, 0x10000, 0x7f, 0xa4c, 0x5, 0x80, 0xb, 0x8, 0xb, 0xd, 0xfffffffe, 0x9, 0x1432, 0x0, 0x0, 0x6, 0x1, 0xdb71, 0xffff, 0x4, 0x101, 0x3, 0xc3b9, 0x1, 0x2, 0xb1e4, 0x9, 0x3, 0xe, 0x80000001, 0x8, 0x401, 0x1, 0x7, 0x2, 0x385, 0xde, 0xab84, 0xde, 0x8001, 0x7, 0x7, 0x8000, 0x9, 0x2, 0x2, 0x9, 0x2, 0x5, 0x9, 0x0, 0x6, 0x2, 0x5, 0x81, 0x1000, 0x7, 0x4, 0x40, 0x2, 0x8, 0x10000, 0x9, 0xfffffffe, 0x2, 0xfffffffb, 0x5, 0x1, 0x1, 0x10, 0x2549, 0x5, 0x200, 0x0, 0xeb2, 0x3, 0x2, 0x2, 0xc, 0x6, 0x3ff, 0xffffe3dc, 0x2, 0x9, 0x8, 0xffffdd5e, 0x80, 0xfff, 0x2, 0x1, 0x0, 0x200, 0xe48d, 0xfffff8ee, 0xb1, 0x81, 0xeb, 0x3, 0x0, 0x1, 0x80000001, 0x5, 0x1ff, 0x7, 0x7, 0x5, 0x2, 0x6a38bf39, 0x6, 0x7ff, 0x1bb800, 0x7, 0x5, 0x4, 0x3ff, 0x81, 0x8000, 0x7f, 0x66, 0xffffffff, 0x80, 0x9, 0x0, 0x226a, 0x8, 0x4, 0x790, 0x0, 0xffff8001, 0x8f, 0xbbf, 0x5, 0xffff, 0x9, 0xb83, 0x5, 0x0, 0x6, 0x4, 0x3b, 0x2, 0x8001, 0x8, 0xb9e, 0x6, 0x3, 0x0, 0x9, 0x6, 0x3, 0xfffffff9, 0x7ff, 0x100, 0x0, 0x81, 0x3ff, 0x8, 0x400, 0x9, 0x4, 0x7, 0x8, 0x6, 0x11, 0x1, 0xfffffffd, 0x5, 0xe7cb, 0x3, 0x5, 0xc, 0xff, 0x400, 0x4, 0xb30, 0xe4, 0x7fffffff, 0x9, 0x7, 0xa, 0x1afa, 0x2, 0x6, 0x2, 0x6, 0x1, 0x5, 0x9, 0x2, 0x8001, 0xe, 0x1, 0xfffffffe, 0x2, 0x0, 0x7, 0x66, 0xfffffffa, 0x5, 0x6, 0xe, 0x4, 0x2, 0xe38, 0x3, 0x80, 0xdb23, 0x1, 0x6456, 0x6000000, 0x8, 0xffff, 0x9, 0x0, 0x8d, 0x56, 0xb, 0x2, 0x4, 0x7ff, 0x8, 0x0, 0x9, 0x2f, 0x7, 0x1, 0x1, 0x3, 0x4, 0x4, 0x80, 0x4, 0x9, 0x3, 0xffffff5b, 0x5, 0x48f, 0x7, 0x0, 0xb753, 0xb7a6, 0xfff, 0x2, 0x9, 0x9, 0x6, 0x3, 0x4, 0x20, 0xe223, 0x80, 0x5, 0xfffffffe, 0x1, 0xfffffffb, 0x100, 0x3, 0x115d, 0xfffffff9, 0x5, 0x2, 0x5, 0x7, 0x6236a69d, 0x1, 0xffffffff, 0x0, 0x0, 0x1, 0x8c, 0x4, 0x8, 0xc, 0x77, 0x9, 0xf, 0x6, 0x1d7, 0x6, 0x9, 0xffffffff, 0x7, 0xf2, 0x5, 0x9, 0x3, 0x3, 0x9, 0x0, 0xc, 0x1, 0x3, 0x1, 0x2, 0x3, 0x1, 0xe0, 0x6, 0x9, 0x9, 0x7, 0x7fff, 0x80000001, 0xa429, 0x6, 0xf20, 0x7fffffff, 0x8, 0x2, 0x0, 0x100, 0x6, 0x7, 0x7, 0x6, 0x7, 0x6, 0x8, 0x8, 0x6, 0x7, 0x0, 0xc06, 0x9, 0xf0, 0x6, 0x7ff, 0xe00, 0x12a4, 0x0, 0x3, 0x8ae0, 0xffffffe7, 0x2, 0x4, 0x9, 0x0, 0x80, 0x10001, 0x7, 0x4, 0x8, 0x4, 0x5, 0x4, 0x4, 0x4, 0xf3, 0xfffffffe, 0x5, 0x0, 0xe22, 0x67, 0x7, 0x0, 0x6, 0x2, 0x1, 0x1, 0x9, 0x4, 0x4d, 0x0, 0x0, 0x55, 0x8000, 0xfd, 0xfffffff7, 0x9, 0x10001, 0x10000, 0x81e, 0xaaa0, 0x3, 0xc60, 0x88, 0x10a6, 0x8, 0xef9f, 0x7, 0x7fff, 0x5, 0x6, 0x8e8, 0x200, 0x0, 0x7ff, 0x0, 0x3, 0x100, 0x1, 0x2, 0x2, 0x0, 0x6, 0x0, 0x5cb6, 0x5, 0x0, 0x7e64, 0x0, 0x3, 0x5, 0x9, 0x254, 0xb86, 0x1ab2e81, 0x30ba, 0xb772, 0xd, 0x6, 0x5, 0x8000, 0x0, 0x0, 0x1, 0x2, 0x67db375a, 0x7fff, 0x80000001, 0x4, 0x9, 0x5, 0x8, 0x3, 0xb00e, 0xf0b, 0x833, 0x5b, 0x3, 0x40, 0x80000001, 0xb, 0x4, 0x2, 0x0, 0x9, 0xf, 0x6, 0x200, 0x1, 0x5, 0x6, 0x7, 0x1ff, 0x8, 0x18, 0xc90, 0x6, 0x0, 0x8, 0x9, 0x800, 0x3, 0x7, 0x1000, 0xc, 0x6, 0x7, 0xfff, 0x9, 0x7fff8000, 0x1, 0xff800000, 0xca, 0x6, 0x3, 0x2, 0x8, 0x5, 0x5, 0xfffffffe, 0x10001, 0x400, 0x3, 0xffffffae, 0x4, 0x3, 0x7, 0x2, 0x9, 0xfffffbff, 0x0, 0x0, 0x4, 0x4, 0x3, 0x5, 0x7, 0x0, 0x1, 0x7, 0x8, 0x7, 0x5, 0x5, 0x404, 0x8, 0x7, 0x9, 0x5, 0x4d1, 0x6, 0x80000000, 0x5, 0x9f, 0x4, 0xfffffff8, 0x7ff, 0x2, 0x40000000, 0xc3, 0xa293, 0x2, 0x9, 0xd, 0x8, 0x3, 0x1fed, 0x8, 0x1, 0x9, 0x3, 0x1, 0xb0, 0x5, 0x42d, 0xfffffff9, 0x4, 0x8001, 0x51, 0x80, 0x6, 0x6, 0x100, 0x0, 0x7, 0x93dd, 0x6, 0x13, 0x81, 0x8, 0x81, 0x2b, 0x0, 0x5, 0x2, 0x2, 0xc3c, 0x4, 0x2, 0x9, 0x4, 0x6, 0x2, 0x8, 0x2, 0x3b, 0x5, 0x0, 0x5, 0x6, 0xf, 0x37, 0xffff, 0xb9, 0xca12, 0x324bc677, 0x0, 0x9, 0xffff, 0xf5, 0x7ff, 0x40, 0x101, 0x0, 0x8, 0x400, 0xbd, 0x0, 0x5, 0x1, 0x3, 0x80, 0x800, 0x4, 0x7f, 0x1, 0x8, 0x7, 0x2, 0x0, 0x6, 0xfffffffa, 0x8, 0xff6, 0x8000000, 0x9, 0x6, 0x8, 0x6, 0x0, 0x4, 0x5, 0x4, 0x0, 0x138a, 0x0, 0x7f, 0x0, 0xfffffff8, 0x1, 0x0, 0x6, 0x2, 0x6, 0x8f, 0x5, 0x3a, 0x8, 0xc0, 0x6a3b, 0x2, 0xffffff86, 0x35, 0x2, 0x8, 0x4, 0xa, 0x2, 0x1, 0x7f000, 0x8, 0x449, 0x9, 0x200, 0x8, 0x86, 0x4, 0x800, 0x4, 0xffff, 0x8, 0x2, 0x5, 0x9, 0x200, 0x6, 0x67, 0xffffffff, 0xfff, 0x3, 0x8, 0x8000, 0x2, 0x12a, 0x8, 0x6, 0x8, 0x25, 0x5, 0x38, 0x5, 0x8, 0x4, 0x39, 0x9745, 0xa2a, 0x81, 0x7, 0x6, 0x4, 0x4, 0xfffffff7, 0x516f, 0x8, 0x1, 0x400, 0x3ff, 0x360, 0x2b0c2d27, 0x0, 0x2, 0x101, 0x12, 0x3, 0xdea, 0x3, 0x6a, 0x1ff, 0x2, 0x6, 0xfffffff8, 0x8001, 0x5, 0x401, 0x2, 0x2, 0x0, 0x1, 0x0, 0x200, 0x10, 0x9, 0x9, 0x3, 0x3, 0x1, 0x3, 0xd, 0x2e0, 0x401, 0x8000, 0x0, 0xae, 0x4, 0x4, 0x6, 0x9f58, 0x9, 0x8, 0x1, 0x2, 0x9, 0x8, 0x2, 0x9, 0x2, 0x20, 0x4, 0xf, 0x401, 0x1, 0x401, 0x3, 0x0, 0x3, 0xc, 0x800, 0x28000000, 0x3, 0x5af9, 0x0, 0xb6c, 0x8, 0xb907, 0x4, 0x7, 0xffff2d21, 0x485, 0x1000, 0x6, 0x4, 0x1, 0x81, 0x2, 0xbd1e, 0x6, 0x33, 0xd, 0x80, 0x8, 0xf9, 0x7fffffff, 0x10001, 0x11, 0x1, 0xe, 0x0, 0x4, 0x9, 0xffffffff, 0x7, 0x9, 0x5, 0x7f1f, 0x7, 0x7, 0x8, 0x3, 0x7, 0xc, 0x7, 0x3, 0x0, 0x2, 0x40, 0xd, 0x9, 0x9, 0x200, 0x40, 0x31cc, 0xffff56d2, 0x20000000, 0xfff, 0x9, 0x5, 0x5, 0xfffffff9, 0x0, 0xff, 0x100, 0x3, 0x6, 0x0, 0x8b, 0x200, 0x80, 0x2, 0xffff, 0x8001, 0xd8c7378, 0x1, 0x4, 0x0, 0x5, 0x3, 0x3, 0x1, 0xdc5e, 0x0, 0x4, 0x3b, 0xffff, 0x1, 0xffffffff, 0xffff, 0x1, 0x400, 0x0, 0x2, 0x5, 0x1000, 0x8000, 0xfffffeff, 0x620a, 0x5, 0x2, 0x0, 0x8, 0x4, 0xdc, 0x2, 0xe, 0x7, 0x140000, 0xfffffff7, 0x1ff, 0x0, 0xb, 0xfd, 0xdd18, 0x0, 0x1, 0x40, 0x5, 0x7c43, 0x4, 0x2c, 0xffff, 0x8, 0x6, 0x200, 0x9, 0xffff, 0x9f, 0x6, 0x3, 0x100, 0x2, 0x9, 0x2, 0x9, 0x1, 0x100, 0x7, 0x5, 0xe, 0x24, 0x8001, 0x6, 0x8000, 0x3, 0xf2, 0x2, 0x1, 0x10001, 0xdeca, 0x4, 0xea, 0x6, 0x3, 0x8, 0x7ff, 0x9, 0x0, 0x8, 0x5b, 0x9, 0x4, 0xff, 0xbf02, 0x2e90a212, 0x40000c, 0x8, 0x20000000, 0x6, 0xffff, 0xfffff801, 0x2], 0x2, 0x400, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000b00)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x16b8c5b5213a03b5}) executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x2, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x298) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 30, 30, 9, 4, 14, 2, 1, 2, 23, 4, 5, 28, 2] detailed listing: executing program 6: unshare(0x6020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000002c0)={0x3, 0x0, 0xfffff3a2}) executing program 6: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) read(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r9, 0x80000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000cc0)) lseek(r0, 0x0, 0x3) r10 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) r11 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x10, 0x81, 0x80, 0x4}, {0x9, 0x5, 0xe, 0x2, 0x10, 0xd, 0xa, 0x9}, {0x9, 0x5, 0x9, 0x3, 0x20, 0x0, 0x0, 0xfd}}}}}}]}}, 0x0) syz_usb_ep_write(r11, 0x7, 0x9, &(0x7f0000000300)="39151cdff086a4bbcb") executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r2, @ANYBLOB="5c005a80140001800500070001000000050006000100000044000380120001000c"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000000c0)="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") r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0x3}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffe0f, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r8 = socket$inet6(0xa, 0x2, 0x0) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f0000008880), 0x45b, 0x2, 0x0) unshare(0x62020400) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r9, 0x0, 0x5, &(0x7f0000000240)={@loopback, @multicast2, 0xfffb, "66c5aff8a7eb17f1f6cec2e7780795478c84aea31700", 0x96bf, 0x2, 0x7a, 0x6b}, 0x3c) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000000), 0x4) socket(0x10, 0x3, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4001010) executing program 2: madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r0, &(0x7f0000000740)='0', 0x1) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\t/'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000780)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000020a09040000000000000000020000000900010073797a3000000000090001e173797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0x74}, 0x1, 0xf5ffffff}, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x80000000000000a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) epoll_create(0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309180008000a00", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800070008000000062102000100000008000500", @ANYRES16=r0], 0x54}, 0x1, 0x0, 0x5000000, 0x24004845}, 0x8000002) executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000ffffff800000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000fffffffd7f000000000000005504000001ed0a002500000017ff2000dd40000000000000730a13fe000000003e04000000000000e5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800d9b3a69b37caa964e4b7000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325a904514d8e90131bfc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f49e4dcc1b7af0b51b9cafeda067b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb860600911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b30e55ac1275e938706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff0492df6b53002514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa250bc93b233a2291b5b10eebc49b6882f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753446de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000010000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468db"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) executing program 5: r0 = syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000500)=ANY=[@ANYBLOB="120110030000004035120182400001020301090286080000003009080b00010107208c0904000000010120000924010040041d000708240a0001ff23030c240302"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="004e82a3adfc8c4409e6f5030400000004034308"], 0x0, 0x0, 0x0}, 0x0) executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'team0\x00', 0x1}, 0x18) close(0x3) r1 = syz_open_dev$sndpcmc(&(0x7f0000000540), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f00000009c0)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000c40)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1c79, &(0x7f0000000d00)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000e40)=0x7) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000020000008520000004000000184a00000200000000000000000000007c94000010000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r6, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x80}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2f}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x4}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x4880) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000180)) executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001701000001e500000000d8936e75a545998a2db3c561ef65a300000000000018000000000000001701000004000000fffbffff00000000"], 0x30, 0x40}], 0x1, 0x40800) executing program 6: unshare(0x6020400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000200)={0x4004, r0, 0x2}) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, 0x0) executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x12, 0x0, {0xc, 0xd}, {0xc, 0x5}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048810}, 0x2000000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f00000005c0)={0xdf, 0x0, 0x80000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x4, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001b80)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0x270, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) mprotect(&(0x7f0000e15000/0x2000)=nil, 0x2000, 0x2) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000001f80)={'ip6_vti0\x00', &(0x7f0000001fc0)=@ethtool_cmd={0x41, 0x5, 0x3, 0x0, 0x7, 0x0, 0x0, 0xfc, 0x0, 0xfc, 0x0, 0xfffffff9, 0x0, 0xff, 0x0, 0x45, [0x0, 0x6]}}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f0000019100400014000200100011"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000100)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000240)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x1, 0x5f6, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x24}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_open_dev$media(&(0x7f00000003c0), 0x6be, 0xc8683) ioctl$MEDIA_IOC_REQUEST_ALLOC(r10, 0x80047c05, &(0x7f0000000480)) r11 = dup(r9) syz_ublk_setup_queues(r11, r8, &(0x7f0000000340)={0x0, 0x20fb87, 0x1, 0xfffffffd, 0x32c}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xba5e, 0x8000, 0x1006, 0x160, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6605, 0x200, 0x10000000, 0x546}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88db, 0x10000, 0x3, 0xfffffffc, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000000, 0x8000, 0x2, 0xbd, 0x0, r3}}], 0x1, &(0x7f0000000540)={0x2e, 0x54, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r7, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) ioctl$MEMREADOOB(r11, 0xc0104d04, &(0x7f0000000500)={0x6, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_modify_offsets$flags(r4, r12, 0x38, 0xfffffffa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x14) syz_usb_connect(0x3, 0x96d, &(0x7f0000000a80)=ANY=[@ANYBLOB="12010102e21b5140b1134200e8a90102030109025b09040d9720090904320409f073ea09090503002000f80040090504104000"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r11, 0x7b2, &(0x7f0000001b40)={&(0x7f0000000b40)=[0x5, 0xaa4, 0xdb, 0x7, 0xd, 0x800, 0x401, 0xf, 0x4, 0x6, 0x800, 0x40, 0x6, 0x4, 0xfffffffe, 0x40d, 0xff, 0x1, 0xc6, 0x100, 0x6, 0x3, 0x80000001, 0xbfb, 0x2, 0x6, 0x8, 0x6, 0x5, 0x64fe2241, 0x6, 0x5, 0x8, 0x8, 0x8b, 0x2, 0x69, 0x3, 0x6, 0xadb433a, 0x10000, 0xffff96d0, 0x0, 0x0, 0x0, 0x2, 0x1000, 0x401, 0x5, 0x0, 0x8001, 0x400, 0x2, 0x5, 0x80, 0x400, 0x5, 0x9, 0x80000001, 0x10001, 0x9, 0x4, 0x8000, 0x7, 0x1, 0x7, 0xffff8000, 0xfffffff7, 0x5, 0x6, 0x0, 0x1, 0xfffffffc, 0x7, 0x7ff, 0x8000, 0x4, 0x2, 0x6, 0x0, 0x2, 0x2, 0x86b, 0x3, 0x5, 0x65c8049d, 0x8, 0x8, 0x6, 0x2, 0xe1, 0x9, 0x6, 0x4, 0x0, 0x3, 0x5, 0x101, 0x9, 0x3, 0x0, 0x0, 0x2, 0x3, 0x3, 0x80000001, 0x5664, 0x80, 0x75, 0x3, 0x8, 0xee, 0x8000, 0x1, 0x10000, 0x7f, 0xa4c, 0x5, 0x80, 0xb, 0x8, 0xb, 0xd, 0xfffffffe, 0x9, 0x1432, 0x0, 0x0, 0x6, 0x1, 0xdb71, 0xffff, 0x4, 0x101, 0x3, 0xc3b9, 0x1, 0x2, 0xb1e4, 0x9, 0x3, 0xe, 0x80000001, 0x8, 0x401, 0x1, 0x7, 0x2, 0x385, 0xde, 0xab84, 0xde, 0x8001, 0x7, 0x7, 0x8000, 0x9, 0x2, 0x2, 0x9, 0x2, 0x5, 0x9, 0x0, 0x6, 0x2, 0x5, 0x81, 0x1000, 0x7, 0x4, 0x40, 0x2, 0x8, 0x10000, 0x9, 0xfffffffe, 0x2, 0xfffffffb, 0x5, 0x1, 0x1, 0x10, 0x2549, 0x5, 0x200, 0x0, 0xeb2, 0x3, 0x2, 0x2, 0xc, 0x6, 0x3ff, 0xffffe3dc, 0x2, 0x9, 0x8, 0xffffdd5e, 0x80, 0xfff, 0x2, 0x1, 0x0, 0x200, 0xe48d, 0xfffff8ee, 0xb1, 0x81, 0xeb, 0x3, 0x0, 0x1, 0x80000001, 0x5, 0x1ff, 0x7, 0x7, 0x5, 0x2, 0x6a38bf39, 0x6, 0x7ff, 0x1bb800, 0x7, 0x5, 0x4, 0x3ff, 0x81, 0x8000, 0x7f, 0x66, 0xffffffff, 0x80, 0x9, 0x0, 0x226a, 0x8, 0x4, 0x790, 0x0, 0xffff8001, 0x8f, 0xbbf, 0x5, 0xffff, 0x9, 0xb83, 0x5, 0x0, 0x6, 0x4, 0x3b, 0x2, 0x8001, 0x8, 0xb9e, 0x6, 0x3, 0x0, 0x9, 0x6, 0x3, 0xfffffff9, 0x7ff, 0x100, 0x0, 0x81, 0x3ff, 0x8, 0x400, 0x9, 0x4, 0x7, 0x8, 0x6, 0x11, 0x1, 0xfffffffd, 0x5, 0xe7cb, 0x3, 0x5, 0xc, 0xff, 0x400, 0x4, 0xb30, 0xe4, 0x7fffffff, 0x9, 0x7, 0xa, 0x1afa, 0x2, 0x6, 0x2, 0x6, 0x1, 0x5, 0x9, 0x2, 0x8001, 0xe, 0x1, 0xfffffffe, 0x2, 0x0, 0x7, 0x66, 0xfffffffa, 0x5, 0x6, 0xe, 0x4, 0x2, 0xe38, 0x3, 0x80, 0xdb23, 0x1, 0x6456, 0x6000000, 0x8, 0xffff, 0x9, 0x0, 0x8d, 0x56, 0xb, 0x2, 0x4, 0x7ff, 0x8, 0x0, 0x9, 0x2f, 0x7, 0x1, 0x1, 0x3, 0x4, 0x4, 0x80, 0x4, 0x9, 0x3, 0xffffff5b, 0x5, 0x48f, 0x7, 0x0, 0xb753, 0xb7a6, 0xfff, 0x2, 0x9, 0x9, 0x6, 0x3, 0x4, 0x20, 0xe223, 0x80, 0x5, 0xfffffffe, 0x1, 0xfffffffb, 0x100, 0x3, 0x115d, 0xfffffff9, 0x5, 0x2, 0x5, 0x7, 0x6236a69d, 0x1, 0xffffffff, 0x0, 0x0, 0x1, 0x8c, 0x4, 0x8, 0xc, 0x77, 0x9, 0xf, 0x6, 0x1d7, 0x6, 0x9, 0xffffffff, 0x7, 0xf2, 0x5, 0x9, 0x3, 0x3, 0x9, 0x0, 0xc, 0x1, 0x3, 0x1, 0x2, 0x3, 0x1, 0xe0, 0x6, 0x9, 0x9, 0x7, 0x7fff, 0x80000001, 0xa429, 0x6, 0xf20, 0x7fffffff, 0x8, 0x2, 0x0, 0x100, 0x6, 0x7, 0x7, 0x6, 0x7, 0x6, 0x8, 0x8, 0x6, 0x7, 0x0, 0xc06, 0x9, 0xf0, 0x6, 0x7ff, 0xe00, 0x12a4, 0x0, 0x3, 0x8ae0, 0xffffffe7, 0x2, 0x4, 0x9, 0x0, 0x80, 0x10001, 0x7, 0x4, 0x8, 0x4, 0x5, 0x4, 0x4, 0x4, 0xf3, 0xfffffffe, 0x5, 0x0, 0xe22, 0x67, 0x7, 0x0, 0x6, 0x2, 0x1, 0x1, 0x9, 0x4, 0x4d, 0x0, 0x0, 0x55, 0x8000, 0xfd, 0xfffffff7, 0x9, 0x10001, 0x10000, 0x81e, 0xaaa0, 0x3, 0xc60, 0x88, 0x10a6, 0x8, 0xef9f, 0x7, 0x7fff, 0x5, 0x6, 0x8e8, 0x200, 0x0, 0x7ff, 0x0, 0x3, 0x100, 0x1, 0x2, 0x2, 0x0, 0x6, 0x0, 0x5cb6, 0x5, 0x0, 0x7e64, 0x0, 0x3, 0x5, 0x9, 0x254, 0xb86, 0x1ab2e81, 0x30ba, 0xb772, 0xd, 0x6, 0x5, 0x8000, 0x0, 0x0, 0x1, 0x2, 0x67db375a, 0x7fff, 0x80000001, 0x4, 0x9, 0x5, 0x8, 0x3, 0xb00e, 0xf0b, 0x833, 0x5b, 0x3, 0x40, 0x80000001, 0xb, 0x4, 0x2, 0x0, 0x9, 0xf, 0x6, 0x200, 0x1, 0x5, 0x6, 0x7, 0x1ff, 0x8, 0x18, 0xc90, 0x6, 0x0, 0x8, 0x9, 0x800, 0x3, 0x7, 0x1000, 0xc, 0x6, 0x7, 0xfff, 0x9, 0x7fff8000, 0x1, 0xff800000, 0xca, 0x6, 0x3, 0x2, 0x8, 0x5, 0x5, 0xfffffffe, 0x10001, 0x400, 0x3, 0xffffffae, 0x4, 0x3, 0x7, 0x2, 0x9, 0xfffffbff, 0x0, 0x0, 0x4, 0x4, 0x3, 0x5, 0x7, 0x0, 0x1, 0x7, 0x8, 0x7, 0x5, 0x5, 0x404, 0x8, 0x7, 0x9, 0x5, 0x4d1, 0x6, 0x80000000, 0x5, 0x9f, 0x4, 0xfffffff8, 0x7ff, 0x2, 0x40000000, 0xc3, 0xa293, 0x2, 0x9, 0xd, 0x8, 0x3, 0x1fed, 0x8, 0x1, 0x9, 0x3, 0x1, 0xb0, 0x5, 0x42d, 0xfffffff9, 0x4, 0x8001, 0x51, 0x80, 0x6, 0x6, 0x100, 0x0, 0x7, 0x93dd, 0x6, 0x13, 0x81, 0x8, 0x81, 0x2b, 0x0, 0x5, 0x2, 0x2, 0xc3c, 0x4, 0x2, 0x9, 0x4, 0x6, 0x2, 0x8, 0x2, 0x3b, 0x5, 0x0, 0x5, 0x6, 0xf, 0x37, 0xffff, 0xb9, 0xca12, 0x324bc677, 0x0, 0x9, 0xffff, 0xf5, 0x7ff, 0x40, 0x101, 0x0, 0x8, 0x400, 0xbd, 0x0, 0x5, 0x1, 0x3, 0x80, 0x800, 0x4, 0x7f, 0x1, 0x8, 0x7, 0x2, 0x0, 0x6, 0xfffffffa, 0x8, 0xff6, 0x8000000, 0x9, 0x6, 0x8, 0x6, 0x0, 0x4, 0x5, 0x4, 0x0, 0x138a, 0x0, 0x7f, 0x0, 0xfffffff8, 0x1, 0x0, 0x6, 0x2, 0x6, 0x8f, 0x5, 0x3a, 0x8, 0xc0, 0x6a3b, 0x2, 0xffffff86, 0x35, 0x2, 0x8, 0x4, 0xa, 0x2, 0x1, 0x7f000, 0x8, 0x449, 0x9, 0x200, 0x8, 0x86, 0x4, 0x800, 0x4, 0xffff, 0x8, 0x2, 0x5, 0x9, 0x200, 0x6, 0x67, 0xffffffff, 0xfff, 0x3, 0x8, 0x8000, 0x2, 0x12a, 0x8, 0x6, 0x8, 0x25, 0x5, 0x38, 0x5, 0x8, 0x4, 0x39, 0x9745, 0xa2a, 0x81, 0x7, 0x6, 0x4, 0x4, 0xfffffff7, 0x516f, 0x8, 0x1, 0x400, 0x3ff, 0x360, 0x2b0c2d27, 0x0, 0x2, 0x101, 0x12, 0x3, 0xdea, 0x3, 0x6a, 0x1ff, 0x2, 0x6, 0xfffffff8, 0x8001, 0x5, 0x401, 0x2, 0x2, 0x0, 0x1, 0x0, 0x200, 0x10, 0x9, 0x9, 0x3, 0x3, 0x1, 0x3, 0xd, 0x2e0, 0x401, 0x8000, 0x0, 0xae, 0x4, 0x4, 0x6, 0x9f58, 0x9, 0x8, 0x1, 0x2, 0x9, 0x8, 0x2, 0x9, 0x2, 0x20, 0x4, 0xf, 0x401, 0x1, 0x401, 0x3, 0x0, 0x3, 0xc, 0x800, 0x28000000, 0x3, 0x5af9, 0x0, 0xb6c, 0x8, 0xb907, 0x4, 0x7, 0xffff2d21, 0x485, 0x1000, 0x6, 0x4, 0x1, 0x81, 0x2, 0xbd1e, 0x6, 0x33, 0xd, 0x80, 0x8, 0xf9, 0x7fffffff, 0x10001, 0x11, 0x1, 0xe, 0x0, 0x4, 0x9, 0xffffffff, 0x7, 0x9, 0x5, 0x7f1f, 0x7, 0x7, 0x8, 0x3, 0x7, 0xc, 0x7, 0x3, 0x0, 0x2, 0x40, 0xd, 0x9, 0x9, 0x200, 0x40, 0x31cc, 0xffff56d2, 0x20000000, 0xfff, 0x9, 0x5, 0x5, 0xfffffff9, 0x0, 0xff, 0x100, 0x3, 0x6, 0x0, 0x8b, 0x200, 0x80, 0x2, 0xffff, 0x8001, 0xd8c7378, 0x1, 0x4, 0x0, 0x5, 0x3, 0x3, 0x1, 0xdc5e, 0x0, 0x4, 0x3b, 0xffff, 0x1, 0xffffffff, 0xffff, 0x1, 0x400, 0x0, 0x2, 0x5, 0x1000, 0x8000, 0xfffffeff, 0x620a, 0x5, 0x2, 0x0, 0x8, 0x4, 0xdc, 0x2, 0xe, 0x7, 0x140000, 0xfffffff7, 0x1ff, 0x0, 0xb, 0xfd, 0xdd18, 0x0, 0x1, 0x40, 0x5, 0x7c43, 0x4, 0x2c, 0xffff, 0x8, 0x6, 0x200, 0x9, 0xffff, 0x9f, 0x6, 0x3, 0x100, 0x2, 0x9, 0x2, 0x9, 0x1, 0x100, 0x7, 0x5, 0xe, 0x24, 0x8001, 0x6, 0x8000, 0x3, 0xf2, 0x2, 0x1, 0x10001, 0xdeca, 0x4, 0xea, 0x6, 0x3, 0x8, 0x7ff, 0x9, 0x0, 0x8, 0x5b, 0x9, 0x4, 0xff, 0xbf02, 0x2e90a212, 0x40000c, 0x8, 0x20000000, 0x6, 0xffff, 0xfffff801, 0x2], 0x2, 0x400, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000b00)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x16b8c5b5213a03b5}) executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x2, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x298) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 bisect: split chunks (needed=true): <14> bisect: split chunk #0 of len 14 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 2, 23, 4, 5, 28, 2] detailed listing: executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000fffffffd7f000000000000005504000001ed0a002500000017ff2000dd40000000000000730a13fe000000003e04000000000000e5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800d9b3a69b37caa964e4b7000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325a904514d8e90131bfc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f49e4dcc1b7af0b51b9cafeda067b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb860600911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b30e55ac1275e938706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff0492df6b53002514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa250bc93b233a2291b5b10eebc49b6882f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753446de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000010000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468db"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) executing program 5: r0 = syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000500)=ANY=[@ANYBLOB="120110030000004035120182400001020301090286080000003009080b00010107208c0904000000010120000924010040041d000708240a0001ff23030c240302"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="004e82a3adfc8c4409e6f5030400000004034308"], 0x0, 0x0, 0x0}, 0x0) executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'team0\x00', 0x1}, 0x18) close(0x3) r1 = syz_open_dev$sndpcmc(&(0x7f0000000540), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f00000009c0)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000c40)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1c79, &(0x7f0000000d00)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000e40)=0x7) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000020000008520000004000000184a00000200000000000000000000007c94000010000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r6, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x80}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2f}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x4}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x4880) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000180)) executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001701000001e500000000d8936e75a545998a2db3c561ef65a300000000000018000000000000001701000004000000fffbffff00000000"], 0x30, 0x40}], 0x1, 0x40800) executing program 6: unshare(0x6020400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000200)={0x4004, r0, 0x2}) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, 0x0) executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x12, 0x0, {0xc, 0xd}, {0xc, 0x5}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048810}, 0x2000000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f00000005c0)={0xdf, 0x0, 0x80000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x4, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001b80)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0x270, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) mprotect(&(0x7f0000e15000/0x2000)=nil, 0x2000, 0x2) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000001f80)={'ip6_vti0\x00', &(0x7f0000001fc0)=@ethtool_cmd={0x41, 0x5, 0x3, 0x0, 0x7, 0x0, 0x0, 0xfc, 0x0, 0xfc, 0x0, 0xfffffff9, 0x0, 0xff, 0x0, 0x45, [0x0, 0x6]}}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f0000019100400014000200100011"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000100)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000240)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x1, 0x5f6, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x24}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_open_dev$media(&(0x7f00000003c0), 0x6be, 0xc8683) ioctl$MEDIA_IOC_REQUEST_ALLOC(r10, 0x80047c05, &(0x7f0000000480)) r11 = dup(r9) syz_ublk_setup_queues(r11, r8, &(0x7f0000000340)={0x0, 0x20fb87, 0x1, 0xfffffffd, 0x32c}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xba5e, 0x8000, 0x1006, 0x160, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6605, 0x200, 0x10000000, 0x546}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88db, 0x10000, 0x3, 0xfffffffc, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000000, 0x8000, 0x2, 0xbd, 0x0, r3}}], 0x1, &(0x7f0000000540)={0x2e, 0x54, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r7, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) ioctl$MEMREADOOB(r11, 0xc0104d04, &(0x7f0000000500)={0x6, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_modify_offsets$flags(r4, r12, 0x38, 0xfffffffa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x14) syz_usb_connect(0x3, 0x96d, &(0x7f0000000a80)=ANY=[@ANYBLOB="12010102e21b5140b1134200e8a90102030109025b09040d9720090904320409f073ea09090503002000f80040090504104000"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r11, 0x7b2, &(0x7f0000001b40)={&(0x7f0000000b40)=[0x5, 0xaa4, 0xdb, 0x7, 0xd, 0x800, 0x401, 0xf, 0x4, 0x6, 0x800, 0x40, 0x6, 0x4, 0xfffffffe, 0x40d, 0xff, 0x1, 0xc6, 0x100, 0x6, 0x3, 0x80000001, 0xbfb, 0x2, 0x6, 0x8, 0x6, 0x5, 0x64fe2241, 0x6, 0x5, 0x8, 0x8, 0x8b, 0x2, 0x69, 0x3, 0x6, 0xadb433a, 0x10000, 0xffff96d0, 0x0, 0x0, 0x0, 0x2, 0x1000, 0x401, 0x5, 0x0, 0x8001, 0x400, 0x2, 0x5, 0x80, 0x400, 0x5, 0x9, 0x80000001, 0x10001, 0x9, 0x4, 0x8000, 0x7, 0x1, 0x7, 0xffff8000, 0xfffffff7, 0x5, 0x6, 0x0, 0x1, 0xfffffffc, 0x7, 0x7ff, 0x8000, 0x4, 0x2, 0x6, 0x0, 0x2, 0x2, 0x86b, 0x3, 0x5, 0x65c8049d, 0x8, 0x8, 0x6, 0x2, 0xe1, 0x9, 0x6, 0x4, 0x0, 0x3, 0x5, 0x101, 0x9, 0x3, 0x0, 0x0, 0x2, 0x3, 0x3, 0x80000001, 0x5664, 0x80, 0x75, 0x3, 0x8, 0xee, 0x8000, 0x1, 0x10000, 0x7f, 0xa4c, 0x5, 0x80, 0xb, 0x8, 0xb, 0xd, 0xfffffffe, 0x9, 0x1432, 0x0, 0x0, 0x6, 0x1, 0xdb71, 0xffff, 0x4, 0x101, 0x3, 0xc3b9, 0x1, 0x2, 0xb1e4, 0x9, 0x3, 0xe, 0x80000001, 0x8, 0x401, 0x1, 0x7, 0x2, 0x385, 0xde, 0xab84, 0xde, 0x8001, 0x7, 0x7, 0x8000, 0x9, 0x2, 0x2, 0x9, 0x2, 0x5, 0x9, 0x0, 0x6, 0x2, 0x5, 0x81, 0x1000, 0x7, 0x4, 0x40, 0x2, 0x8, 0x10000, 0x9, 0xfffffffe, 0x2, 0xfffffffb, 0x5, 0x1, 0x1, 0x10, 0x2549, 0x5, 0x200, 0x0, 0xeb2, 0x3, 0x2, 0x2, 0xc, 0x6, 0x3ff, 0xffffe3dc, 0x2, 0x9, 0x8, 0xffffdd5e, 0x80, 0xfff, 0x2, 0x1, 0x0, 0x200, 0xe48d, 0xfffff8ee, 0xb1, 0x81, 0xeb, 0x3, 0x0, 0x1, 0x80000001, 0x5, 0x1ff, 0x7, 0x7, 0x5, 0x2, 0x6a38bf39, 0x6, 0x7ff, 0x1bb800, 0x7, 0x5, 0x4, 0x3ff, 0x81, 0x8000, 0x7f, 0x66, 0xffffffff, 0x80, 0x9, 0x0, 0x226a, 0x8, 0x4, 0x790, 0x0, 0xffff8001, 0x8f, 0xbbf, 0x5, 0xffff, 0x9, 0xb83, 0x5, 0x0, 0x6, 0x4, 0x3b, 0x2, 0x8001, 0x8, 0xb9e, 0x6, 0x3, 0x0, 0x9, 0x6, 0x3, 0xfffffff9, 0x7ff, 0x100, 0x0, 0x81, 0x3ff, 0x8, 0x400, 0x9, 0x4, 0x7, 0x8, 0x6, 0x11, 0x1, 0xfffffffd, 0x5, 0xe7cb, 0x3, 0x5, 0xc, 0xff, 0x400, 0x4, 0xb30, 0xe4, 0x7fffffff, 0x9, 0x7, 0xa, 0x1afa, 0x2, 0x6, 0x2, 0x6, 0x1, 0x5, 0x9, 0x2, 0x8001, 0xe, 0x1, 0xfffffffe, 0x2, 0x0, 0x7, 0x66, 0xfffffffa, 0x5, 0x6, 0xe, 0x4, 0x2, 0xe38, 0x3, 0x80, 0xdb23, 0x1, 0x6456, 0x6000000, 0x8, 0xffff, 0x9, 0x0, 0x8d, 0x56, 0xb, 0x2, 0x4, 0x7ff, 0x8, 0x0, 0x9, 0x2f, 0x7, 0x1, 0x1, 0x3, 0x4, 0x4, 0x80, 0x4, 0x9, 0x3, 0xffffff5b, 0x5, 0x48f, 0x7, 0x0, 0xb753, 0xb7a6, 0xfff, 0x2, 0x9, 0x9, 0x6, 0x3, 0x4, 0x20, 0xe223, 0x80, 0x5, 0xfffffffe, 0x1, 0xfffffffb, 0x100, 0x3, 0x115d, 0xfffffff9, 0x5, 0x2, 0x5, 0x7, 0x6236a69d, 0x1, 0xffffffff, 0x0, 0x0, 0x1, 0x8c, 0x4, 0x8, 0xc, 0x77, 0x9, 0xf, 0x6, 0x1d7, 0x6, 0x9, 0xffffffff, 0x7, 0xf2, 0x5, 0x9, 0x3, 0x3, 0x9, 0x0, 0xc, 0x1, 0x3, 0x1, 0x2, 0x3, 0x1, 0xe0, 0x6, 0x9, 0x9, 0x7, 0x7fff, 0x80000001, 0xa429, 0x6, 0xf20, 0x7fffffff, 0x8, 0x2, 0x0, 0x100, 0x6, 0x7, 0x7, 0x6, 0x7, 0x6, 0x8, 0x8, 0x6, 0x7, 0x0, 0xc06, 0x9, 0xf0, 0x6, 0x7ff, 0xe00, 0x12a4, 0x0, 0x3, 0x8ae0, 0xffffffe7, 0x2, 0x4, 0x9, 0x0, 0x80, 0x10001, 0x7, 0x4, 0x8, 0x4, 0x5, 0x4, 0x4, 0x4, 0xf3, 0xfffffffe, 0x5, 0x0, 0xe22, 0x67, 0x7, 0x0, 0x6, 0x2, 0x1, 0x1, 0x9, 0x4, 0x4d, 0x0, 0x0, 0x55, 0x8000, 0xfd, 0xfffffff7, 0x9, 0x10001, 0x10000, 0x81e, 0xaaa0, 0x3, 0xc60, 0x88, 0x10a6, 0x8, 0xef9f, 0x7, 0x7fff, 0x5, 0x6, 0x8e8, 0x200, 0x0, 0x7ff, 0x0, 0x3, 0x100, 0x1, 0x2, 0x2, 0x0, 0x6, 0x0, 0x5cb6, 0x5, 0x0, 0x7e64, 0x0, 0x3, 0x5, 0x9, 0x254, 0xb86, 0x1ab2e81, 0x30ba, 0xb772, 0xd, 0x6, 0x5, 0x8000, 0x0, 0x0, 0x1, 0x2, 0x67db375a, 0x7fff, 0x80000001, 0x4, 0x9, 0x5, 0x8, 0x3, 0xb00e, 0xf0b, 0x833, 0x5b, 0x3, 0x40, 0x80000001, 0xb, 0x4, 0x2, 0x0, 0x9, 0xf, 0x6, 0x200, 0x1, 0x5, 0x6, 0x7, 0x1ff, 0x8, 0x18, 0xc90, 0x6, 0x0, 0x8, 0x9, 0x800, 0x3, 0x7, 0x1000, 0xc, 0x6, 0x7, 0xfff, 0x9, 0x7fff8000, 0x1, 0xff800000, 0xca, 0x6, 0x3, 0x2, 0x8, 0x5, 0x5, 0xfffffffe, 0x10001, 0x400, 0x3, 0xffffffae, 0x4, 0x3, 0x7, 0x2, 0x9, 0xfffffbff, 0x0, 0x0, 0x4, 0x4, 0x3, 0x5, 0x7, 0x0, 0x1, 0x7, 0x8, 0x7, 0x5, 0x5, 0x404, 0x8, 0x7, 0x9, 0x5, 0x4d1, 0x6, 0x80000000, 0x5, 0x9f, 0x4, 0xfffffff8, 0x7ff, 0x2, 0x40000000, 0xc3, 0xa293, 0x2, 0x9, 0xd, 0x8, 0x3, 0x1fed, 0x8, 0x1, 0x9, 0x3, 0x1, 0xb0, 0x5, 0x42d, 0xfffffff9, 0x4, 0x8001, 0x51, 0x80, 0x6, 0x6, 0x100, 0x0, 0x7, 0x93dd, 0x6, 0x13, 0x81, 0x8, 0x81, 0x2b, 0x0, 0x5, 0x2, 0x2, 0xc3c, 0x4, 0x2, 0x9, 0x4, 0x6, 0x2, 0x8, 0x2, 0x3b, 0x5, 0x0, 0x5, 0x6, 0xf, 0x37, 0xffff, 0xb9, 0xca12, 0x324bc677, 0x0, 0x9, 0xffff, 0xf5, 0x7ff, 0x40, 0x101, 0x0, 0x8, 0x400, 0xbd, 0x0, 0x5, 0x1, 0x3, 0x80, 0x800, 0x4, 0x7f, 0x1, 0x8, 0x7, 0x2, 0x0, 0x6, 0xfffffffa, 0x8, 0xff6, 0x8000000, 0x9, 0x6, 0x8, 0x6, 0x0, 0x4, 0x5, 0x4, 0x0, 0x138a, 0x0, 0x7f, 0x0, 0xfffffff8, 0x1, 0x0, 0x6, 0x2, 0x6, 0x8f, 0x5, 0x3a, 0x8, 0xc0, 0x6a3b, 0x2, 0xffffff86, 0x35, 0x2, 0x8, 0x4, 0xa, 0x2, 0x1, 0x7f000, 0x8, 0x449, 0x9, 0x200, 0x8, 0x86, 0x4, 0x800, 0x4, 0xffff, 0x8, 0x2, 0x5, 0x9, 0x200, 0x6, 0x67, 0xffffffff, 0xfff, 0x3, 0x8, 0x8000, 0x2, 0x12a, 0x8, 0x6, 0x8, 0x25, 0x5, 0x38, 0x5, 0x8, 0x4, 0x39, 0x9745, 0xa2a, 0x81, 0x7, 0x6, 0x4, 0x4, 0xfffffff7, 0x516f, 0x8, 0x1, 0x400, 0x3ff, 0x360, 0x2b0c2d27, 0x0, 0x2, 0x101, 0x12, 0x3, 0xdea, 0x3, 0x6a, 0x1ff, 0x2, 0x6, 0xfffffff8, 0x8001, 0x5, 0x401, 0x2, 0x2, 0x0, 0x1, 0x0, 0x200, 0x10, 0x9, 0x9, 0x3, 0x3, 0x1, 0x3, 0xd, 0x2e0, 0x401, 0x8000, 0x0, 0xae, 0x4, 0x4, 0x6, 0x9f58, 0x9, 0x8, 0x1, 0x2, 0x9, 0x8, 0x2, 0x9, 0x2, 0x20, 0x4, 0xf, 0x401, 0x1, 0x401, 0x3, 0x0, 0x3, 0xc, 0x800, 0x28000000, 0x3, 0x5af9, 0x0, 0xb6c, 0x8, 0xb907, 0x4, 0x7, 0xffff2d21, 0x485, 0x1000, 0x6, 0x4, 0x1, 0x81, 0x2, 0xbd1e, 0x6, 0x33, 0xd, 0x80, 0x8, 0xf9, 0x7fffffff, 0x10001, 0x11, 0x1, 0xe, 0x0, 0x4, 0x9, 0xffffffff, 0x7, 0x9, 0x5, 0x7f1f, 0x7, 0x7, 0x8, 0x3, 0x7, 0xc, 0x7, 0x3, 0x0, 0x2, 0x40, 0xd, 0x9, 0x9, 0x200, 0x40, 0x31cc, 0xffff56d2, 0x20000000, 0xfff, 0x9, 0x5, 0x5, 0xfffffff9, 0x0, 0xff, 0x100, 0x3, 0x6, 0x0, 0x8b, 0x200, 0x80, 0x2, 0xffff, 0x8001, 0xd8c7378, 0x1, 0x4, 0x0, 0x5, 0x3, 0x3, 0x1, 0xdc5e, 0x0, 0x4, 0x3b, 0xffff, 0x1, 0xffffffff, 0xffff, 0x1, 0x400, 0x0, 0x2, 0x5, 0x1000, 0x8000, 0xfffffeff, 0x620a, 0x5, 0x2, 0x0, 0x8, 0x4, 0xdc, 0x2, 0xe, 0x7, 0x140000, 0xfffffff7, 0x1ff, 0x0, 0xb, 0xfd, 0xdd18, 0x0, 0x1, 0x40, 0x5, 0x7c43, 0x4, 0x2c, 0xffff, 0x8, 0x6, 0x200, 0x9, 0xffff, 0x9f, 0x6, 0x3, 0x100, 0x2, 0x9, 0x2, 0x9, 0x1, 0x100, 0x7, 0x5, 0xe, 0x24, 0x8001, 0x6, 0x8000, 0x3, 0xf2, 0x2, 0x1, 0x10001, 0xdeca, 0x4, 0xea, 0x6, 0x3, 0x8, 0x7ff, 0x9, 0x0, 0x8, 0x5b, 0x9, 0x4, 0xff, 0xbf02, 0x2e90a212, 0x40000c, 0x8, 0x20000000, 0x6, 0xffff, 0xfffff801, 0x2], 0x2, 0x400, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000b00)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x16b8c5b5213a03b5}) executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x2, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x298) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 30, 30, 9, 4, 14, 2] detailed listing: executing program 6: unshare(0x6020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000002c0)={0x3, 0x0, 0xfffff3a2}) executing program 6: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) read(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r9, 0x80000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000cc0)) lseek(r0, 0x0, 0x3) r10 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) r11 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x10, 0x81, 0x80, 0x4}, {0x9, 0x5, 0xe, 0x2, 0x10, 0xd, 0xa, 0x9}, {0x9, 0x5, 0x9, 0x3, 0x20, 0x0, 0x0, 0xfd}}}}}}]}}, 0x0) syz_usb_ep_write(r11, 0x7, 0x9, &(0x7f0000000300)="39151cdff086a4bbcb") executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r2, @ANYBLOB="5c005a80140001800500070001000000050006000100000044000380120001000c"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000000c0)="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") r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0x3}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffe0f, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r8 = socket$inet6(0xa, 0x2, 0x0) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f0000008880), 0x45b, 0x2, 0x0) unshare(0x62020400) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r9, 0x0, 0x5, &(0x7f0000000240)={@loopback, @multicast2, 0xfffb, "66c5aff8a7eb17f1f6cec2e7780795478c84aea31700", 0x96bf, 0x2, 0x7a, 0x6b}, 0x3c) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000000), 0x4) socket(0x10, 0x3, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4001010) executing program 2: madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r0, &(0x7f0000000740)='0', 0x1) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\t/'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000780)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000020a09040000000000000000020000000900010073797a3000000000090001e173797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0x74}, 0x1, 0xf5ffffff}, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x80000000000000a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) epoll_create(0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309180008000a00", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800070008000000062102000100000008000500", @ANYRES16=r0], 0x54}, 0x1, 0x0, 0x5000000, 0x24004845}, 0x8000002) executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000ffffff800000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: split chunks (needed=true): <7> bisect: split chunk #0 of len 7 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 14, 2] detailed listing: executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000020a09040000000000000000020000000900010073797a3000000000090001e173797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0x74}, 0x1, 0xf5ffffff}, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x80000000000000a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) epoll_create(0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309180008000a00", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800070008000000062102000100000008000500", @ANYRES16=r0], 0x54}, 0x1, 0x0, 0x5000000, 0x24004845}, 0x8000002) executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000ffffff800000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 30, 30, 9] detailed listing: executing program 6: unshare(0x6020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000002c0)={0x3, 0x0, 0xfffff3a2}) executing program 6: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) read(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r9, 0x80000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000cc0)) lseek(r0, 0x0, 0x3) r10 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) r11 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x10, 0x81, 0x80, 0x4}, {0x9, 0x5, 0xe, 0x2, 0x10, 0xd, 0xa, 0x9}, {0x9, 0x5, 0x9, 0x3, 0x20, 0x0, 0x0, 0xfd}}}}}}]}}, 0x0) syz_usb_ep_write(r11, 0x7, 0x9, &(0x7f0000000300)="39151cdff086a4bbcb") executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r2, @ANYBLOB="5c005a80140001800500070001000000050006000100000044000380120001000c"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000000c0)="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") r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0x3}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffe0f, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r8 = socket$inet6(0xa, 0x2, 0x0) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f0000008880), 0x45b, 0x2, 0x0) unshare(0x62020400) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r9, 0x0, 0x5, &(0x7f0000000240)={@loopback, @multicast2, 0xfffb, "66c5aff8a7eb17f1f6cec2e7780795478c84aea31700", 0x96bf, 0x2, 0x7a, 0x6b}, 0x3c) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000000), 0x4) socket(0x10, 0x3, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4001010) executing program 2: madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r0, &(0x7f0000000740)='0', 0x1) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\t/'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000780)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: split chunks (needed=true): <4> bisect: split chunk #0 of len 4 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 9] detailed listing: executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r2, @ANYBLOB="5c005a80140001800500070001000000050006000100000044000380120001000c"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000000c0)="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") r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0x3}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffe0f, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r8 = socket$inet6(0xa, 0x2, 0x0) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f0000008880), 0x45b, 0x2, 0x0) unshare(0x62020400) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r9, 0x0, 0x5, &(0x7f0000000240)={@loopback, @multicast2, 0xfffb, "66c5aff8a7eb17f1f6cec2e7780795478c84aea31700", 0x96bf, 0x2, 0x7a, 0x6b}, 0x3c) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000000), 0x4) socket(0x10, 0x3, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4001010) executing program 2: madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r0, &(0x7f0000000740)='0', 0x1) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\t/'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000780)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 30] detailed listing: executing program 6: unshare(0x6020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000002c0)={0x3, 0x0, 0xfffff3a2}) executing program 6: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) read(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r9, 0x80000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000cc0)) lseek(r0, 0x0, 0x3) r10 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) r11 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x10, 0x81, 0x80, 0x4}, {0x9, 0x5, 0xe, 0x2, 0x10, 0xd, 0xa, 0x9}, {0x9, 0x5, 0x9, 0x3, 0x20, 0x0, 0x0, 0xfd}}}}}}]}}, 0x0) syz_usb_ep_write(r11, 0x7, 0x9, &(0x7f0000000300)="39151cdff086a4bbcb") program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-io_uring_setup-close-mq_open-mq_getsetattr-syz_open_dev$ttys-ioctl$TIOCSETD-syz_io_uring_setup-syz_io_uring_submit-socket$nl_generic-ioctl$IOMMU_TEST_OP_MOCK_DOMAIN-unlink-sendmsg$nl_generic-io_uring_enter-ioctl$TIOCSETD-syz_open_dev$sndctrl-read-mmap$IORING_OFF_SQ_RING-munmap$IORING_OFF_CQ_RING-prctl$PR_SET_SYSCALL_USER_DISPATCH_ON-lseek-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_open_dev$sndctrl-syz_usb_connect$sierra_net-syz_usb_ep_write detailed listing: executing program 6: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) read(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r9, 0x80000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000cc0)) lseek(r0, 0x0, 0x3) r10 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) r11 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x10, 0x81, 0x80, 0x4}, {0x9, 0x5, 0xe, 0x2, 0x10, 0xd, 0xa, 0x9}, {0x9, 0x5, 0x9, 0x3, 0x20, 0x0, 0x0, 0xfd}}}}}}]}}, 0x0) syz_usb_ep_write(r11, 0x7, 0x9, &(0x7f0000000300)="39151cdff086a4bbcb") program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 1 programs left: executing program 6: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) read(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r9, 0x80000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000cc0)) lseek(r0, 0x0, 0x3) r10 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) r11 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x10, 0x81, 0x80, 0x4}, {0x9, 0x5, 0xe, 0x2, 0x10, 0xd, 0xa, 0x9}, {0x9, 0x5, 0x9, 0x3, 0x20, 0x0, 0x0, 0xfd}}}}}}]}}, 0x0) syz_usb_ep_write(r11, 0x7, 0x9, &(0x7f0000000300)="39151cdff086a4bbcb") bisect: trying to concatenate bisect: concatenate 1 entries testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-io_uring_setup-close-mq_open-mq_getsetattr-syz_open_dev$ttys-ioctl$TIOCSETD-syz_io_uring_setup-syz_io_uring_submit-socket$nl_generic-ioctl$IOMMU_TEST_OP_MOCK_DOMAIN-unlink-sendmsg$nl_generic-io_uring_enter-ioctl$TIOCSETD-syz_open_dev$sndctrl-read-mmap$IORING_OFF_SQ_RING-munmap$IORING_OFF_CQ_RING-prctl$PR_SET_SYSCALL_USER_DISPATCH_ON-lseek-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_open_dev$sndctrl-syz_usb_connect$sierra_net-syz_usb_ep_write detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) read(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r9, 0x80000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000cc0)) lseek(r0, 0x0, 0x3) r10 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) r11 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x10, 0x81, 0x80, 0x4}, {0x9, 0x5, 0xe, 0x2, 0x10, 0xd, 0xa, 0x9}, {0x9, 0x5, 0x9, 0x3, 0x20, 0x0, 0x0, 0xfd}}}}}}]}}, 0x0) syz_usb_ep_write(r11, 0x7, 0x9, &(0x7f0000000300)="39151cdff086a4bbcb") program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: concatenation succeeded found reproducer with 30 syscalls minimizing guilty program testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-io_uring_setup-close-mq_open-mq_getsetattr-syz_open_dev$ttys-ioctl$TIOCSETD-syz_io_uring_setup-syz_io_uring_submit-socket$nl_generic-ioctl$IOMMU_TEST_OP_MOCK_DOMAIN-unlink-sendmsg$nl_generic-io_uring_enter-ioctl$TIOCSETD-syz_open_dev$sndctrl-read-mmap$IORING_OFF_SQ_RING-munmap$IORING_OFF_CQ_RING-prctl$PR_SET_SYSCALL_USER_DISPATCH_ON-lseek-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_open_dev$sndctrl-syz_usb_connect$sierra_net detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) read(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r9, 0x80000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000cc0)) lseek(r0, 0x0, 0x3) r10 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x10, 0x81, 0x80, 0x4}, {0x9, 0x5, 0xe, 0x2, 0x10, 0xd, 0xa, 0x9}, {0x9, 0x5, 0x9, 0x3, 0x20, 0x0, 0x0, 0xfd}}}}}}]}}, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-io_uring_setup-close-mq_open-mq_getsetattr-syz_open_dev$ttys-ioctl$TIOCSETD-syz_io_uring_setup-syz_io_uring_submit-socket$nl_generic-ioctl$IOMMU_TEST_OP_MOCK_DOMAIN-unlink-sendmsg$nl_generic-io_uring_enter-ioctl$TIOCSETD-syz_open_dev$sndctrl-read-mmap$IORING_OFF_SQ_RING-munmap$IORING_OFF_CQ_RING-prctl$PR_SET_SYSCALL_USER_DISPATCH_ON-lseek-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_open_dev$sndctrl detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) read(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r9, 0x80000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000cc0)) lseek(r0, 0x0, 0x3) r10 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-io_uring_setup-close-mq_open-mq_getsetattr-syz_open_dev$ttys-ioctl$TIOCSETD-syz_io_uring_setup-syz_io_uring_submit-socket$nl_generic-ioctl$IOMMU_TEST_OP_MOCK_DOMAIN-unlink-sendmsg$nl_generic-io_uring_enter-ioctl$TIOCSETD-syz_open_dev$sndctrl-read-mmap$IORING_OFF_SQ_RING-munmap$IORING_OFF_CQ_RING-prctl$PR_SET_SYSCALL_USER_DISPATCH_ON-lseek-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) read(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r9, 0x80000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000cc0)) lseek(r0, 0x0, 0x3) r10 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-io_uring_setup-close-mq_open-mq_getsetattr-syz_open_dev$ttys-ioctl$TIOCSETD-syz_io_uring_setup-syz_io_uring_submit-socket$nl_generic-ioctl$IOMMU_TEST_OP_MOCK_DOMAIN-unlink-sendmsg$nl_generic-io_uring_enter-ioctl$TIOCSETD-syz_open_dev$sndctrl-read-mmap$IORING_OFF_SQ_RING-munmap$IORING_OFF_CQ_RING-prctl$PR_SET_SYSCALL_USER_DISPATCH_ON-lseek-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) read(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r9, 0x80000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000cc0)) lseek(r0, 0x0, 0x3) r10 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-io_uring_setup-close-mq_open-mq_getsetattr-syz_open_dev$ttys-ioctl$TIOCSETD-syz_io_uring_setup-syz_io_uring_submit-socket$nl_generic-ioctl$IOMMU_TEST_OP_MOCK_DOMAIN-unlink-sendmsg$nl_generic-io_uring_enter-ioctl$TIOCSETD-syz_open_dev$sndctrl-read-mmap$IORING_OFF_SQ_RING-munmap$IORING_OFF_CQ_RING-prctl$PR_SET_SYSCALL_USER_DISPATCH_ON-lseek-syz_usb_connect-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) read(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r9, 0x80000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000cc0)) lseek(r0, 0x0, 0x3) r10 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) program did not crash testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-io_uring_setup-close-mq_open-mq_getsetattr-syz_open_dev$ttys-ioctl$TIOCSETD-syz_io_uring_setup-syz_io_uring_submit-socket$nl_generic-ioctl$IOMMU_TEST_OP_MOCK_DOMAIN-unlink-sendmsg$nl_generic-io_uring_enter-ioctl$TIOCSETD-syz_open_dev$sndctrl-read-mmap$IORING_OFF_SQ_RING-munmap$IORING_OFF_CQ_RING-prctl$PR_SET_SYSCALL_USER_DISPATCH_ON-lseek-syz_usb_connect-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) read(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r9, 0x80000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000cc0)) lseek(r0, 0x0, 0x3) r10 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-io_uring_setup-close-mq_open-mq_getsetattr-syz_open_dev$ttys-ioctl$TIOCSETD-syz_io_uring_setup-syz_io_uring_submit-socket$nl_generic-ioctl$IOMMU_TEST_OP_MOCK_DOMAIN-unlink-sendmsg$nl_generic-io_uring_enter-ioctl$TIOCSETD-syz_open_dev$sndctrl-read-mmap$IORING_OFF_SQ_RING-munmap$IORING_OFF_CQ_RING-prctl$PR_SET_SYSCALL_USER_DISPATCH_ON-lseek-syz_usb_connect-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) read(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r9, 0x80000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000cc0)) lseek(r0, 0x0, 0x3) r10 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-io_uring_setup-close-mq_open-mq_getsetattr-syz_open_dev$ttys-ioctl$TIOCSETD-syz_io_uring_setup-syz_io_uring_submit-socket$nl_generic-ioctl$IOMMU_TEST_OP_MOCK_DOMAIN-unlink-sendmsg$nl_generic-io_uring_enter-ioctl$TIOCSETD-syz_open_dev$sndctrl-read-mmap$IORING_OFF_SQ_RING-munmap$IORING_OFF_CQ_RING-prctl$PR_SET_SYSCALL_USER_DISPATCH_ON-lseek-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) read(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r9, 0x80000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000cc0)) lseek(r0, 0x0, 0x3) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-io_uring_setup-close-mq_open-mq_getsetattr-syz_open_dev$ttys-ioctl$TIOCSETD-syz_io_uring_setup-syz_io_uring_submit-socket$nl_generic-ioctl$IOMMU_TEST_OP_MOCK_DOMAIN-unlink-sendmsg$nl_generic-io_uring_enter-ioctl$TIOCSETD-syz_open_dev$sndctrl-read-mmap$IORING_OFF_SQ_RING-munmap$IORING_OFF_CQ_RING-prctl$PR_SET_SYSCALL_USER_DISPATCH_ON-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) read(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r9, 0x80000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000cc0)) r10 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-io_uring_setup-close-mq_open-mq_getsetattr-syz_open_dev$ttys-ioctl$TIOCSETD-syz_io_uring_setup-syz_io_uring_submit-socket$nl_generic-ioctl$IOMMU_TEST_OP_MOCK_DOMAIN-unlink-sendmsg$nl_generic-io_uring_enter-ioctl$TIOCSETD-syz_open_dev$sndctrl-read-mmap$IORING_OFF_SQ_RING-munmap$IORING_OFF_CQ_RING-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) read(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r9, 0x80000000) r10 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-io_uring_setup-close-mq_open-mq_getsetattr-syz_open_dev$ttys-ioctl$TIOCSETD-syz_io_uring_setup-syz_io_uring_submit-socket$nl_generic-ioctl$IOMMU_TEST_OP_MOCK_DOMAIN-unlink-sendmsg$nl_generic-io_uring_enter-ioctl$TIOCSETD-syz_open_dev$sndctrl-read-mmap$IORING_OFF_SQ_RING-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) read(r8, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r9 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-io_uring_setup-close-mq_open-mq_getsetattr-syz_open_dev$ttys-ioctl$TIOCSETD-syz_io_uring_setup-syz_io_uring_submit-socket$nl_generic-ioctl$IOMMU_TEST_OP_MOCK_DOMAIN-unlink-sendmsg$nl_generic-io_uring_enter-ioctl$TIOCSETD-syz_open_dev$sndctrl-read-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) read(r8, 0x0, 0x0) r9 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-io_uring_setup-close-mq_open-mq_getsetattr-syz_open_dev$ttys-ioctl$TIOCSETD-syz_io_uring_setup-syz_io_uring_submit-socket$nl_generic-ioctl$IOMMU_TEST_OP_MOCK_DOMAIN-unlink-sendmsg$nl_generic-io_uring_enter-ioctl$TIOCSETD-syz_open_dev$sndctrl-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) r8 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-io_uring_setup-close-mq_open-mq_getsetattr-syz_open_dev$ttys-ioctl$TIOCSETD-syz_io_uring_setup-syz_io_uring_submit-socket$nl_generic-ioctl$IOMMU_TEST_OP_MOCK_DOMAIN-unlink-sendmsg$nl_generic-io_uring_enter-ioctl$TIOCSETD-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-io_uring_setup-close-mq_open-mq_getsetattr-syz_open_dev$ttys-ioctl$TIOCSETD-syz_io_uring_setup-syz_io_uring_submit-socket$nl_generic-ioctl$IOMMU_TEST_OP_MOCK_DOMAIN-unlink-sendmsg$nl_generic-io_uring_enter-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r8 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-io_uring_setup-close-mq_open-mq_getsetattr-syz_open_dev$ttys-ioctl$TIOCSETD-syz_io_uring_setup-syz_io_uring_submit-socket$nl_generic-ioctl$IOMMU_TEST_OP_MOCK_DOMAIN-unlink-sendmsg$nl_generic-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r4, r5, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r6, 0x0, 0xc000) r7 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-io_uring_setup-close-mq_open-mq_getsetattr-syz_open_dev$ttys-ioctl$TIOCSETD-syz_io_uring_setup-syz_io_uring_submit-socket$nl_generic-ioctl$IOMMU_TEST_OP_MOCK_DOMAIN-unlink-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r4, r5, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') r6 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-io_uring_setup-close-mq_open-mq_getsetattr-syz_open_dev$ttys-ioctl$TIOCSETD-syz_io_uring_setup-syz_io_uring_submit-socket$nl_generic-ioctl$IOMMU_TEST_OP_MOCK_DOMAIN-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r4, r5, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) r6 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-io_uring_setup-close-mq_open-mq_getsetattr-syz_open_dev$ttys-ioctl$TIOCSETD-syz_io_uring_setup-syz_io_uring_submit-socket$nl_generic-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r4, r5, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-io_uring_setup-close-mq_open-mq_getsetattr-syz_open_dev$ttys-ioctl$TIOCSETD-syz_io_uring_setup-syz_io_uring_submit-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r4, r5, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r6 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-io_uring_setup-close-mq_open-mq_getsetattr-syz_open_dev$ttys-ioctl$TIOCSETD-syz_io_uring_setup-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r0 = io_uring_setup(0x9, 0x0) close(0x3) r1 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r1, 0x0, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0xd) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r0}, &(0x7f0000000480), &(0x7f00000004c0), 0x0) r3 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-io_uring_setup-close-mq_open-mq_getsetattr-syz_open_dev$ttys-ioctl$TIOCSETD-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) io_uring_setup(0x9, 0x0) close(0x3) r0 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r0, 0x0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0xd) r2 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-io_uring_setup-close-mq_open-mq_getsetattr-syz_open_dev$ttys-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) io_uring_setup(0x9, 0x0) close(0x3) r0 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-io_uring_setup-close-mq_open-mq_getsetattr-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) io_uring_setup(0x9, 0x0) close(0x3) r0 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-io_uring_setup-close-mq_open-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) io_uring_setup(0x9, 0x0) close(0x3) mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-io_uring_setup-close-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) io_uring_setup(0x9, 0x0) close(0x3) r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-io_uring_setup-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) io_uring_setup(0x9, 0x0) r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-openat$sysfs-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$IORING_OFF_SQ_RING-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) program did not crash testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash extracting C reproducer testing compiled C program (duration=1m26.553269876s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io program crashed: BUG: sleeping function called from invalid context in mmc_free_host simplifying C reproducer testing compiled C program (duration=1m26.553269876s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=1m26.553269876s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=1m26.553269876s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=1m26.553269876s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=1m26.553269876s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=1m26.553269876s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=1m26.553269876s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=1m26.553269876s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=1m26.553269876s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host validation run: crashed=true testing program (duration=1m26.553269876s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host validation run: crashed=true testing program (duration=1m26.553269876s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash validation run: crashed=false testing program (duration=1m26.553269876s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host validation run: crashed=true reproducing took 2h43m1.457260212s repro crashed as (corrupted=false): BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/0 preempt_count: 101, expected: 0 RCU nest depth: 0, expected: 0 locks held by swapper/0/0: 1, last CPU#0: #0: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 kernel/time/timer.c:1745 Preemption disabled at: [] schedule_preempt_disabled+0x1d/0x30 kernel/sched/core.c:7434 CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 __might_resched+0x36a/0x4c0 kernel/sched/core.c:9264 __cancel_work_sync+0x6d/0x110 kernel/workqueue.c:4561 mmc_free_host+0x19/0x40 drivers/mmc/core/host.c:700 call_timer_fn+0x18d/0x5f0 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1799 [inline] __run_timers kernel/time/timer.c:2374 [inline] __run_timer_base+0x652/0x8b0 kernel/time/timer.c:2386 run_timer_base kernel/time/timer.c:2395 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405 handle_softirqs+0x226/0x860 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] invoke_softirq kernel/softirq.c:519 [inline] __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: 1b 8b 02 e9 c3 08 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 d5 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 RSP: 0018:ffffffff8fa07ca0 EFLAGS: 00000246 RAX: 00000000000d9d81 RBX: ffffffff819bed10 RCX: 8000000000000001 RDX: 0000000000000001 RSI: ffffffff8e4697c1 RDI: ffffffff8c6ddb80 RBP: ffffffff8fa07d78 R08: ffff8880b8433a1b R09: 1ffff11017086743 R10: dffffc0000000000 R11: ffffed1017086744 R12: 0000000000000000 R13: 1ffffffff1f51e00 R14: 1ffffffff1f40f9c R15: dffffc0000000000 arch_safe_halt arch/x86/kernel/process.c:767 [inline] default_idle+0x9/0x20 arch/x86/kernel/process.c:768 default_idle_call+0x72/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x2e0/0x540 kernel/sched/idle.c:355 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:454 rest_init+0x378/0x3a0 init/main.c:732 start_kernel+0x392/0x3e0 init/main.c:1190 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310 x86_64_start_kernel+0x137/0x1b0 arch/x86/kernel/head64.c:291 common_startup_64+0x13e/0x157 ODEBUG: object ffffc90000007a80 is NOT on stack ffffffff8fa00000, but annotated. ------------[ cut here ]------------ 1 WARNING: lib/debugobjects.c:672 at debug_object_is_on_stack lib/debugobjects.c:672 [inline], CPU#0: swapper/0/0 WARNING: lib/debugobjects.c:672 at lookup_object_or_alloc lib/debugobjects.c:705 [inline], CPU#0: swapper/0/0 WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0 lib/debugobjects.c:798, CPU#0: swapper/0/0 Modules linked in: CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 PREEMPT(full) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:debug_object_is_on_stack lib/debugobjects.c:672 [inline] RIP: 0010:lookup_object_or_alloc lib/debugobjects.c:705 [inline] RIP: 0010:__debug_object_init+0x2c4/0x3c0 lib/debugobjects.c:798 Code: cc cc cc 41 ff c7 44 89 3d 09 88 e7 16 48 c7 c1 80 e4 6d 8c 48 c7 c7 e0 e4 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 cd 70 3b fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 61 85 6c 0b 3b 05 5f RSP: 0018:ffffc900000079b8 EFLAGS: 00010046 RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: 7cd4ec326ff69c00 RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 RBP: ffffffff8fa8f020 R08: 0000000000000100 R09: 1ffff110170848e2 R10: dffffc0000000000 R11: ffffed10170848e3 R12: 1ffff92000000f4c R13: ffff888032350af0 R14: dffffc0000000000 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000213b7bdc6020 CR3: 000000003564e000 CR4: 00000000003526f0 Call Trace: __synchronize_srcu+0x1d5/0x2f0 kernel/rcu/srcutree.c:1475 wakeup_source_remove drivers/base/power/wakeup.c:201 [inline] wakeup_source_unregister+0x129/0x3f0 drivers/base/power/wakeup.c:237 mmc_host_classdev_release+0x47/0x100 drivers/mmc/core/host.c:69 device_release+0xc4/0x1f0 drivers/base/core.c:-1 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x222/0x550 lib/kobject.c:737 call_timer_fn+0x18d/0x5f0 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1799 [inline] __run_timers kernel/time/timer.c:2374 [inline] __run_timer_base+0x652/0x8b0 kernel/time/timer.c:2386 run_timer_base kernel/time/timer.c:2395 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405 handle_softirqs+0x226/0x860 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] invoke_softirq kernel/softirq.c:519 [inline] __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: 1b 8b 02 e9 c3 08 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 d5 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 RSP: 0018:ffffffff8fa07ca0 EFLAGS: 00000246 RAX: 00000000000d9d81 RBX: ffffffff819bed10 RCX: 8000000000000001 RDX: 0000000000000001 RSI: ffffffff8e4697c1 RDI: ffffffff8c6ddb80 RBP: ffffffff8fa07d78 R08: ffff8880b8433a1b R09: 1ffff11017086743 R10: dffffc0000000000 R11: ffffed1017086744 R12: 0000000000000000 R13: 1ffffffff1f51e00 R14: 1ffffffff1f40f9c R15: dffffc0000000000 arch_safe_halt arch/x86/kernel/process.c:767 [inline] default_idle+0x9/0x20 arch/x86/kernel/process.c:768 default_idle_call+0x72/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x2e0/0x540 kernel/sched/idle.c:355 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:454 rest_init+0x378/0x3a0 init/main.c:732 start_kernel+0x392/0x3e0 init/main.c:1190 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310 x86_64_start_kernel+0x137/0x1b0 arch/x86/kernel/head64.c:291 common_startup_64+0x13e/0x157 ---------------- Code disassembly (best guess): 0: 1b 8b 02 e9 c3 08 sbb 0x8c3e902(%rbx),%ecx 6: 03 00 add (%rax),%eax 8: cc int3 9: cc int3 a: cc int3 b: 90 nop c: 90 nop d: 90 nop e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: 90 nop 18: 90 nop 19: 90 nop 1a: 90 nop 1b: f3 0f 1e fa endbr64 1f: 66 90 xchg %ax,%ax 21: 0f 00 2d c3 d5 20 00 verw 0x20d5c3(%rip) # 0x20d5eb 28: fb sti 29: f4 hlt * 2a: c3 ret <-- trapping instruction 2b: cc int3 2c: cc int3 2d: cc int3 2e: cc int3 2f: cc int3 30: cc int3 31: cc int3 32: cc int3 33: cc int3 34: cc int3 35: cc int3 36: cc int3 37: cc int3 38: cc int3 39: cc int3 3a: cc int3 3b: 90 nop 3c: 90 nop 3d: 90 nop 3e: 90 nop 3f: 90 nop final repro crashed as (corrupted=false): BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/0 preempt_count: 101, expected: 0 RCU nest depth: 0, expected: 0 locks held by swapper/0/0: 1, last CPU#0: #0: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 kernel/time/timer.c:1745 Preemption disabled at: [] schedule_preempt_disabled+0x1d/0x30 kernel/sched/core.c:7434 CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 __might_resched+0x36a/0x4c0 kernel/sched/core.c:9264 __cancel_work_sync+0x6d/0x110 kernel/workqueue.c:4561 mmc_free_host+0x19/0x40 drivers/mmc/core/host.c:700 call_timer_fn+0x18d/0x5f0 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1799 [inline] __run_timers kernel/time/timer.c:2374 [inline] __run_timer_base+0x652/0x8b0 kernel/time/timer.c:2386 run_timer_base kernel/time/timer.c:2395 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405 handle_softirqs+0x226/0x860 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] invoke_softirq kernel/softirq.c:519 [inline] __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: 1b 8b 02 e9 c3 08 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 d5 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 RSP: 0018:ffffffff8fa07ca0 EFLAGS: 00000246 RAX: 00000000000d9d81 RBX: ffffffff819bed10 RCX: 8000000000000001 RDX: 0000000000000001 RSI: ffffffff8e4697c1 RDI: ffffffff8c6ddb80 RBP: ffffffff8fa07d78 R08: ffff8880b8433a1b R09: 1ffff11017086743 R10: dffffc0000000000 R11: ffffed1017086744 R12: 0000000000000000 R13: 1ffffffff1f51e00 R14: 1ffffffff1f40f9c R15: dffffc0000000000 arch_safe_halt arch/x86/kernel/process.c:767 [inline] default_idle+0x9/0x20 arch/x86/kernel/process.c:768 default_idle_call+0x72/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x2e0/0x540 kernel/sched/idle.c:355 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:454 rest_init+0x378/0x3a0 init/main.c:732 start_kernel+0x392/0x3e0 init/main.c:1190 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310 x86_64_start_kernel+0x137/0x1b0 arch/x86/kernel/head64.c:291 common_startup_64+0x13e/0x157 ODEBUG: object ffffc90000007a80 is NOT on stack ffffffff8fa00000, but annotated. ------------[ cut here ]------------ 1 WARNING: lib/debugobjects.c:672 at debug_object_is_on_stack lib/debugobjects.c:672 [inline], CPU#0: swapper/0/0 WARNING: lib/debugobjects.c:672 at lookup_object_or_alloc lib/debugobjects.c:705 [inline], CPU#0: swapper/0/0 WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0 lib/debugobjects.c:798, CPU#0: swapper/0/0 Modules linked in: CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 PREEMPT(full) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:debug_object_is_on_stack lib/debugobjects.c:672 [inline] RIP: 0010:lookup_object_or_alloc lib/debugobjects.c:705 [inline] RIP: 0010:__debug_object_init+0x2c4/0x3c0 lib/debugobjects.c:798 Code: cc cc cc 41 ff c7 44 89 3d 09 88 e7 16 48 c7 c1 80 e4 6d 8c 48 c7 c7 e0 e4 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 cd 70 3b fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 61 85 6c 0b 3b 05 5f RSP: 0018:ffffc900000079b8 EFLAGS: 00010046 RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: 7cd4ec326ff69c00 RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 RBP: ffffffff8fa8f020 R08: 0000000000000100 R09: 1ffff110170848e2 R10: dffffc0000000000 R11: ffffed10170848e3 R12: 1ffff92000000f4c R13: ffff888032350af0 R14: dffffc0000000000 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000213b7bdc6020 CR3: 000000003564e000 CR4: 00000000003526f0 Call Trace: __synchronize_srcu+0x1d5/0x2f0 kernel/rcu/srcutree.c:1475 wakeup_source_remove drivers/base/power/wakeup.c:201 [inline] wakeup_source_unregister+0x129/0x3f0 drivers/base/power/wakeup.c:237 mmc_host_classdev_release+0x47/0x100 drivers/mmc/core/host.c:69 device_release+0xc4/0x1f0 drivers/base/core.c:-1 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x222/0x550 lib/kobject.c:737 call_timer_fn+0x18d/0x5f0 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1799 [inline] __run_timers kernel/time/timer.c:2374 [inline] __run_timer_base+0x652/0x8b0 kernel/time/timer.c:2386 run_timer_base kernel/time/timer.c:2395 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405 handle_softirqs+0x226/0x860 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] invoke_softirq kernel/softirq.c:519 [inline] __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: 1b 8b 02 e9 c3 08 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 d5 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 RSP: 0018:ffffffff8fa07ca0 EFLAGS: 00000246 RAX: 00000000000d9d81 RBX: ffffffff819bed10 RCX: 8000000000000001 RDX: 0000000000000001 RSI: ffffffff8e4697c1 RDI: ffffffff8c6ddb80 RBP: ffffffff8fa07d78 R08: ffff8880b8433a1b R09: 1ffff11017086743 R10: dffffc0000000000 R11: ffffed1017086744 R12: 0000000000000000 R13: 1ffffffff1f51e00 R14: 1ffffffff1f40f9c R15: dffffc0000000000 arch_safe_halt arch/x86/kernel/process.c:767 [inline] default_idle+0x9/0x20 arch/x86/kernel/process.c:768 default_idle_call+0x72/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x2e0/0x540 kernel/sched/idle.c:355 cpu_startup_entry+0x43/0x60 kernel/sched/idle.c:454 rest_init+0x378/0x3a0 init/main.c:732 start_kernel+0x392/0x3e0 init/main.c:1190 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310 x86_64_start_kernel+0x137/0x1b0 arch/x86/kernel/head64.c:291 common_startup_64+0x13e/0x157 ---------------- Code disassembly (best guess): 0: 1b 8b 02 e9 c3 08 sbb 0x8c3e902(%rbx),%ecx 6: 03 00 add (%rax),%eax 8: cc int3 9: cc int3 a: cc int3 b: 90 nop c: 90 nop d: 90 nop e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: 90 nop 18: 90 nop 19: 90 nop 1a: 90 nop 1b: f3 0f 1e fa endbr64 1f: 66 90 xchg %ax,%ax 21: 0f 00 2d c3 d5 20 00 verw 0x20d5c3(%rip) # 0x20d5eb 28: fb sti 29: f4 hlt * 2a: c3 ret <-- trapping instruction 2b: cc int3 2c: cc int3 2d: cc int3 2e: cc int3 2f: cc int3 30: cc int3 31: cc int3 32: cc int3 33: cc int3 34: cc int3 35: cc int3 36: cc int3 37: cc int3 38: cc int3 39: cc int3 3a: cc int3 3b: 90 nop 3c: 90 nop 3d: 90 nop 3e: 90 nop 3f: 90 nop