Extracting prog: 30m37.031946086s Minimizing prog: 14m13.068354695s Simplifying prog options: 0s Extracting C: 1m2.917795475s Simplifying C: 14m41.356871199s 30 programs, timeouts [15s 1m40s 6m0s] extracting reproducer from 30 programs single: executing 5 programs separately with timeout 15s testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$nl_route_sched-socket-sendto-openat$audio-ioctl$SNDCTL_DSP_SETTRIGGER-socket$inet_udp-setsockopt$SO_TIMESTAMPING-connect$inet-sendmmsg-setsockopt$inet_int-setsockopt$inet_int-recvmmsg detailed listing: executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=@deltclass={0x78, 0x29, 0x100, 0x0, 0x0, {}, [@tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6}, @TCA_RATE={0x6}, @TCA_RATE={0x6}]}, 0x78}}, 0x4000045) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x80105014, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_SET_VCPU_EVENTS-socket$caif_stream-prctl$PR_SCHED_CORE-openat-sched_setaffinity-openat$hwrng-openat$ttyS3-openat$mixer-fcntl$dupfd-ioctl$SOUND_MIXER_READ_STEREODEVS-preadv-socket$igmp6-setsockopt$IP6T_SO_SET_REPLACE-setsockopt$IP6T_SO_SET_REPLACE-openat$cgroup_ro-memfd_create-socket$nl_route-syz_usb_connect-getsockopt$sock_cred-syz_open_dev$char_usb-syz_usb_disconnect-socket$can_raw-madvise-setsockopt-setsockopt$CAN_RAW_ERR_FILTER-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_raw-prctl$PR_SET_SYSCALL_USER_DISPATCH_ON detailed listing: executing program 0: ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)={0x73, 0x0, 0xfc, 0x0, 0xffffffff, 0xa, 0x7f, 0x7, 0x0, 0x0, 0xc, 0x7, 0x0, 0x5, 0x4, 0xba, 0x0, 0x4, 0x1, '\x00', 0x0, 0x9}) socket$caif_stream(0x25, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r3, 0x0, r2) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000080)) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x0, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) openat$cgroup_ro(r0, &(0x7f0000000200)='pids.current\x00', 0x275a, 0x0) memfd_create(&(0x7f00000006c0)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\a\x00;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\xb7/\xa5\xa7\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e1\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84,\xd3\x06\xaeO \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x00\x04\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2Cw\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93\x00\x00', 0xd) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_usb_connect(0x1, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a86200000904000002ca744d07090503020000ff99090805848f"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1401}}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000380)) syz_open_dev$char_usb(0xc, 0xb4, 0xc936) syz_usb_disconnect(r5) r6 = socket$can_raw(0x1d, 0x3, 0x1) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) setsockopt(r6, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000040)=0xfffffeb5, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_genetlink_get_family_id$mptcp detailed listing: executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xa7, 0xa3, 0xb1, 0x20, 0x9fb, 0xebbe, 0xeafe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7a, 0x25, 0xe0, 0x0, [], [{{0x9, 0x5, 0x0, 0x3}}]}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-bind$inet6-socket$nl_route-socket-sendmsg$BATADV_CMD_GET_MESH-getsockname$packet-prctl$PR_MCE_KILL-sendmsg$nl_route-sendmsg$nl_route_sched-socket$packet-socket-sendmsg$nl_route_sched-getsockname$packet-fchdir-bind$packet-sendto$inet6-io_uring_register$IORING_REGISTER_FILES_UPDATE2-socket$kcm-close-socket$kcm-socket-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-sendmmsg-mknod$loop-setxattr$incfs_metadata-syz_open_dev$video-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_CREATE_BUFS-ioctl$vim2m_VIDIOC_STREAMON detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x8}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffb}, @TCA_NETEM_RATE64={0xc, 0x8, 0x654534bf5327d02e}, @TCA_NETEM_RATE={0x14}]}}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) fchdir(0xffffffffffffffff) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r4, &(0x7f0000000100)="0503460008003e00000002008100", 0x36, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000400)=""/25, 0x19}, {0x0}, {&(0x7f0000000440)=""/143, 0x8f}, {&(0x7f0000000980)=""/4096, 0x1000}], &(0x7f0000000700), 0x6}, 0x20) r7 = socket$kcm(0x10, 0x2, 0x4) close(r7) socket$kcm(0x10, 0x2, 0x0) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000040)={0x1d, r9, 0x3}, 0x18) sendmmsg(r8, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000100)="e8", 0x1}], 0x2}}], 0x1, 0x0) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x0, 0x4000) r10 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7f, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x1, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3314c94970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) ioctl$vim2m_VIDIOC_STREAMON(r10, 0x40045612, &(0x7f0000000000)=0x1) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$igmp-userfaultfd-ioctl$UFFDIO_API-io_uring_setup-syz_io_uring_setup-syz_io_uring_setup-socket$tipc-socket$tipc-bind$tipc-bind$tipc-bind$tipc-bind$tipc-bind$tipc-close_range-openat$userio-socket$nl_xfrm-socket$inet_udp-openat$udambuf-pselect6 detailed listing: executing program 0: socket$igmp(0x2, 0x3, 0x2) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = io_uring_setup(0x1f2a, &(0x7f0000000000)={0x0, 0x693e, 0x80, 0x3, 0x150}) syz_io_uring_setup(0x7934, &(0x7f0000000200)={0x0, 0x0, 0x200, 0x0, 0x0, 0x0, r1}, 0x0, 0x0) syz_io_uring_setup(0xa91, &(0x7f00000002c0), 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) pselect6(0x40, &(0x7f00000001c0)={0x2fe}, 0x0, 0x0, 0x0, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 15s testing program (duration=22s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 22, 29, 30, 26, 6, 12, 8, 2, 20, 3, 22, 30, 19, 4, 27, 30, 12, 26, 26, 29, 22, 27, 20, 30, 29, 27, 2, 28, 12] detailed listing: executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x5, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/ipc\x00') socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) socket$inet6(0xa, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1f02ffff0000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8], 0x40}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000064000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f280011800e000100636f6e6e6c696d6974000000140002800800024000001c00080001"], 0xac}}, 0x0) socket(0x10, 0x3, 0x0) executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100005bc1fa20cf106880fd2e0000000109021200010000000009040000000714ef007540a2f73086bb8b2a64268c23709e32acef66de68565556af82075e988898e9133cf05e1a4808bd9985c6b92eda388b2730f4"], 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) sendmsg$tipc(r1, &(0x7f0000002340)={&(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10, 0x0}, 0x20008800) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x3, &(0x7f0000003380)=ANY=[], 0x0, 0x0, 0xb7, &(0x7f0000000040)=""/183, 0x41100, 0x0, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) socket$kcm(0x29, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x3c, 0x0, 0x11, @empty, @remote, 0x80, 0x7800}}) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x4161, 0x0) socket$nl_generic(0x10, 0x3, 0x10) executing program 1: pipe(0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @loopback}}, 0x31) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x15e10}], 0x1, 0x0, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000080)=0x0) socket$inet6_sctp(0xa, 0x1, 0x84) wait4(r6, &(0x7f00000000c0), 0x40000000, 0x0) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$nl_route_sched_retired(r2, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f0000001680)=@deltfilter={0xe4, 0x2d, 0x0, 0x0, 0x0, {}, [@f_tcindex={{0xc}, {0xb4, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x4}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x1, 0xc}}, @TCA_TCINDEX_ACT={0x88, 0x7, [@m_ct={0x84, 0x15, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}]}, {0x51, 0x6, "0e7c27384572b4e6acc7fbcf2ff4853f9c9a9be2037ecf934cb2f8cddb288672ae0a1f342844c89dfdeabbb31af897cf5dae25aaa9b377467286a5797be3e0d1638658c839414c691eb3c11670"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x85f0}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x3}]}}]}, 0xe4}}, 0x0) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1, 0x0, 0xb}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1={0x2, 0x0}, 0x0, 0x0, 0x1, 0x3}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') writev(r7, &(0x7f0000000680)=[{&(0x7f00000000c0)="00612f39bd4bc08ba54cd846fd225b7008e1871afdb500c5d3d33d9d9837fbc6f5c6955891ea91a2be1381f584c75e7d2e2115936b8722a0f813ef56d8351b91be2ff39eade5395c645d6892be355cd0c98c3d934c98044a3e518d04beeb3b9cdaa0da5eed0c40c13cd4233882ff46103acfb16592f745809e43e37e1d74de9dad3d3e91fa7345e13a2148f8876c9155af1d5e4c99ecc47e38a8c648d6cc035bdef4d57f2717", 0xa6}, {&(0x7f0000000000)="34d2719429ae206c0b036aab21d6f25a874db2683740925826372947875a191b60e583316aa3f2b731e6be1124d36c3bf363ca38108fc204f2115f5c888ed8b9ad4d7d3d9d0ae3161ebf902129424a4961b0d1650551e052bce7f7586fec952ca814b6b86560a1969da4de0a7e6f891a81672d1c88c983f18b", 0x79}, {&(0x7f0000000180)="a23f66d54d6171fc1ae66b0caedb92ee4a117bb0d0c775b919ed4ea7420dc0c3ca046740a1fc2ce22dad211ea06ba6e8b51cad7808057c10bf7dbd9fe1ae2c44e3b9903c72a595ff70b6519a9ce5576095f7994b461e3e77f7297cb9772896c59bc7484278dc738518504472203ecbd73a92ebed3016e272bfea7951340cad3c14b76d2dc1a317fcd1db51c3bf04e0a65641b1eb28037cf6ae644395547b4c4761f2d766882cb3aff538a3bd598aef17defba142222e9da1404d3f7765eb5425d3073123168d30bc23190169eed70b9e937c9f5b5990db611d4c1097ba39c79caa13c4dbe4ac74d3", 0xe8}, {&(0x7f0000000380)="f321a2b7d00fbf59a12ffa37b3984aca59f1ee61a388f283411fe9c14fed6c24dd3bf149cb811fce82124f005991a9e2ea174a2dcbc2955dde31569d191f6b04ec1d97b46cc578f469c8c6bf01b5d3ae834dda29f2a840c2f9504f039f6c30869f27fbabe144a88c6379103ecdfb37ab1730f47642f138b5adcc3ba205d675579ece0a931de73cc05c32ceb5a8a0a90e7465bfebb01196f74855c2d518ce8fb3058ec75845405ff6bebbc66202386db6f19e1ef2ece6187d860f60857c3dbe9e1246b90e448de2901b4a0649288d93e5e0", 0xd1}, {&(0x7f0000000280)="635dbf35c28b1ab5093396fd5dd6b18540e95140dae95e63fdc07ff7f53e6dfe235f79f6d32dca2505103db91b9a24e5e9729d6e4b299715ac14fcdcf72b4aea3f2a28dbb987b22ca2568b02fb3fb0008677f42e76a5e922d1dfaf7016ef9b4ed25959d97ccf908c9e6474c000aaa76b560e0ddfbe8f03bca36bffbdc0d415f024595ba5", 0x84}, {&(0x7f0000000500)="7f2462566a4b272ce5a762325b43607e6b8c68ef2111d450e44d20aa7ed9c5ea0c58b366435af3c2e3c1536de8867442f5bcf2241d9aab8fcd5d214f7c61595eb1e356c2c7afe00ca7a1cdbe0fff4ed1d295958c2f94b3ba0c3cfed19c686451c5d2b88a0852d7f57e88e38063c4a44dd87da6ba78153add7eaa0cd62508f8", 0x7f}, {&(0x7f0000000580)="78d105061fc7c3bff548ac65d96d8d74f3ace7316983ed9af7567f017d015b34d81243b7f91f13556411651ed7aac1d36953d30d97e76c47db4a04f677dc460be4b7b936821a62c83acb6bfee824546cef960367e693d5d38da9174404d5a646ea", 0x61}, {&(0x7f0000000600)="eefa39e14ef9b5320cabf1a9ea740c7b3a7144166ad2e8c36b03d625273cf3df638ce5ffe4b2fcd597b532186e2caf5c3989cf6d9ae5747a2d22ce58f88ccc5d031d1b656cee2d9129c5439d0296515aa4208da556b04c1add125b1427f611", 0x5f}], 0x8) executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000280)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) r3 = syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000580)='./file0\x00', 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,default_permissions,obj_role='], 0x0, 0x0, 0x0) mknodat(r3, &(0x7f0000000700)='./file0\x00', 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x5d, &(0x7f0000000040)=0x10041) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000013c0)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$dsp(r5, &(0x7f0000000440)=""/171, 0xab) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000}) r6 = syz_open_dev$video4linux(&(0x7f0000000200), 0x74, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r6, 0xc040564b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x1}) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/368]) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0xb, r7, 0x0, r2}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300ef}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000180)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000100), 0xffff, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f0000000040)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/12, 0xc}, {&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000040)=""/216, 0xd8}], 0x3, 0x5, 0xec) executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x8, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)={0x98, 0x0, 0x0, 0x0, 0x0, "", [@generic="54b3adb676a0efce7dcd0955efc42714b8ee7f16091c732c527071c1", @nested={0x4d, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}, @generic="69542ae0bb48405ce3ef9c7220ce3ba85b10bb1bd701c92bc5181c5d3e5327f23ff5640667", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}]}, @typed={0x7, 0x0, 0x0, 0x0, @str='#! '}, @nested={0x14, 0x0, 0x0, 0x1, [@generic, @typed={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x98}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x700, 0x8, 0x1, 0x9, {{0x19, 0x4, 0x1, 0x7, 0x64, 0x67, 0x0, 0x0, 0x2f, 0x0, @multicast2, @dev, {[@timestamp_addr={0x44, 0x34, 0xe9, 0x1, 0x0, [{@empty, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@local, 0x2}, {@broadcast, 0x2}, {@private=0xa010101, 0x10}, {@private=0xa010101, 0x8}]}, @timestamp_addr={0x44, 0x14, 0xe2, 0x1, 0x0, [{@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @end, @cipso={0x86, 0x6}, @end]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r2, r1, 0xf, 0x1, 0x5}, 0x48) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000140)=""/231) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x28011, r1, 0x0) r3 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000340)={0x0, @local, @local}, &(0x7f0000000080)=0xfffffffffffffef5) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000380)={'gretap0\x00', &(0x7f00000004c0)={'syztnl0\x00', r2, 0x7800, 0x9afb7a8cfeab7878, 0x5, 0x4, {{0x44, 0x4, 0x0, 0x9, 0x110, 0x67, 0x0, 0x2, 0x2f, 0x0, @remote, @empty, {[@timestamp_addr={0x44, 0x24, 0x1d, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@multicast2, 0x3}, {@multicast2, 0x6}, {@broadcast, 0x8}]}, @cipso={0x86, 0x12, 0x3, [{0x7, 0xc, "fb25e0044ce9f320c843"}]}, @cipso={0x86, 0x50, 0x3, [{0x7, 0x7, "771c152c87"}, {0x6, 0xf, "761729277b96559258ba889d2e"}, {0x6, 0xd, "d078eb6ca7bd1e20b9328f"}, {0x7, 0xd, "d80b138f69e212e09c3512"}, {0x5, 0xb, "f3bab07420c769c762"}, {0x6, 0xf, "eb20fdfc508a81417bbe35445f"}]}, @timestamp_addr={0x44, 0x34, 0xbb, 0x1, 0x7, [{@multicast2, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf}, {@remote, 0x5}, {@broadcast, 0x8}, {@multicast1}, {@remote, 0x1}]}, @timestamp_prespec={0x44, 0x1c, 0xf8, 0x3, 0xf, [{@empty, 0x7}, {@multicast2, 0x8}, {@empty, 0x1}]}, @ssrr={0x89, 0x23, 0x6a, [@dev={0xac, 0x14, 0x14, 0x1e}, @dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010101, @local, @dev={0xac, 0x14, 0x14, 0x37}, @remote, @rand_addr=0x64010101, @multicast2]}]}}}}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) shmctl$IPC_RMID(0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0xa2, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000880)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) executing program 1: r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick=0x9000000, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"9840365a80905ae7e5f175ec"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0xc4) executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=@deltclass={0x78, 0x29, 0x100, 0x0, 0x0, {}, [@tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6}, @TCA_RATE={0x6}, @TCA_RATE={0x6}]}, 0x78}}, 0x4000045) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x80105014, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x28011, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000077c0)={0x2020}, 0x2020) (fail_nth: 1) executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xa7, 0xa3, 0xb1, 0x20, 0x9fb, 0xebbe, 0xeafe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7a, 0x25, 0xe0, 0x0, [], [{{0x9, 0x5, 0x0, 0x3}}]}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) executing program 0: pipe(0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x15e10}], 0x1, 0x0, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c000000020605000000000000000000200020000900020073797a3200000000050004000000000005000100060000001400078008000640000000000800134000000000050005000a00000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100005bc1fa20cf106880fd2e0000000109021200010000000009040000000714ef007540a2f73086bb8b2a64268c23709e32acef66de68565556af82075e988898e9133cf05e1a4808bd9985c6b92eda388b2730f4"], 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) sendmsg$tipc(r1, &(0x7f0000002340)={&(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10, 0x0}, 0x20008800) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x3, &(0x7f0000003380)=ANY=[], 0x0, 0x0, 0xb7, &(0x7f0000000040)=""/183, 0x41100, 0x0, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) socket$kcm(0x29, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x3c, 0x0, 0x11, @empty, @remote, 0x80, 0x7800}}) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x4161, 0x0) socket$nl_generic(0x10, 0x3, 0x10) executing program 1: socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) io_setup(0x9, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000680)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000300)='3B', 0x2}]) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000025c0)="80", 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}}, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x270, &(0x7f00000006c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}, @void, {@mpls_uc={0x8847, {[{0x973}, {0x2, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x6}], @ipv4=@tcp={{0x4e, 0x4, 0x0, 0x1, 0x252, 0x65, 0x0, 0x9, 0x6, 0x0, @broadcast, @remote, {[@cipso={0x86, 0x54, 0x1, [{0x0, 0xe, "98c344748d2c7fdf0a783281"}, {0x2, 0x8, "b1ebeb4b9424"}, {0x7, 0x3, "f0"}, {0x5, 0xd, "5dba2a4912de458101990c"}, {0x7, 0xd, "d187162243c593023f1799"}, {0x6, 0xe, "5ee0a06651ab4cee52ea4d10"}, {0x2, 0xd, "736305fcb05a5cb042e0ae"}]}, @timestamp_prespec={0x44, 0x1c, 0xc2, 0x3, 0xa, [{@loopback, 0x4}, {@loopback, 0x401}, {@dev={0xac, 0x14, 0x14, 0x3a}}]}, @timestamp_addr={0x44, 0x24, 0xa7, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40}, {@multicast2, 0xc00000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010102}]}, @cipso={0x86, 0x67, 0x3, [{0x6, 0x12, "19a6c1f18177c9998c04452266f92e93"}, {0x6, 0x12, "00000000040800000000000000000a00"}, {0x7, 0xa, "6b00424306db853d"}, {0x0, 0x8, "bc0f7f33ff24"}, {0x7, 0x8, "1a8a1a95fd95"}, {0x5, 0x5, "5f2b14"}, {0x6, 0x9, "9fb2444d49a8c8"}, {0x5, 0x4, 'vj'}, {0x0, 0x11, "ef317e1b51c42fd078973d5aabf3a2"}]}, @end, @ssrr={0x89, 0x1b, 0x7c, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @broadcast]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0x9, [@remote]}]}}, {{0x4e21, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x5, 0x0, 0x2, {[@sack={0x5, 0xe, [0x5, 0x0, 0x9]}, @sack={0x5, 0x6, [0x310]}, @mptcp=@ack={0x1e, 0x7, 0x55, 0x4, "9c5374"}, @timestamp={0x8, 0xa, 0x100, 0x41ee}, @nop, @mss={0x2, 0x4, 0x5}, @mss={0x2, 0x4, 0xffe5}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0xe0000000, 0x9}, @mss={0x2, 0x4, 0xf}]}}, {"9731ddd0cd5776349339a6df86c37ee17d53e29e4ccb0379bbe8fa29550abc0389c9c0a0e7d067f640bbeffc4661019f5309edbd5b0dcb2c4d8a7aa797e3ee6141ef4b39d535d83e49e356f5b9ba4830e8c28c446af7b628b9fa5a0285ab540359d7c861b588c5b1085e926ecf2955bd1847c12ff2925d0960a091f6478cab41a18ddc40b8c96572c17a5eadf983f54b8b67b91b8fd8da46488d6d7c0939830ff0c97743e733116e34db5688f12ff5686e231ecd45b7d967e20439ade8cefdeca8add09fde7b"}}}}}}}, 0x0) madvise(&(0x7f0000208000/0x4000)=nil, 0x4000, 0x13) sync_file_range(0xffffffffffffffff, 0xd82, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) executing program 1: socket$igmp(0x2, 0x3, 0x2) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = io_uring_setup(0x1f2a, &(0x7f0000000000)={0x0, 0x693e, 0x80, 0x3, 0x150}) syz_io_uring_setup(0x7934, &(0x7f0000000200)={0x0, 0x0, 0x200, 0x0, 0x0, 0x0, r1}, 0x0, 0x0) syz_io_uring_setup(0xa91, &(0x7f00000002c0), 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) pselect6(0x40, &(0x7f00000001c0)={0x2fe}, 0x0, 0x0, 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfe0f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xa54, 0x18}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0xba01}, 0x21) executing program 4: keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x4, 0x0) set_mempolicy_home_node(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x6, 0x0) capset(&(0x7f0000000080)={0x20080522, r3}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYBLOB="00042dbd7000fedbdf251400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000f82c000000050029000c000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x501000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000100)) executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c}, 0x48) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x184000, 0x0) munlock(&(0x7f0000438000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f000020f000/0x4000)=nil) munlock(&(0x7f0000a6a000/0x4000)=nil, 0x4000) sysinfo(&(0x7f0000000300)=""/57) mremap(&(0x7f000087f000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', r1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000010000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400126a"], 0x34}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x9, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000100)=""/223, 0x26, 0xdf, 0x1}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r5, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=@deltclass={0x78, 0x29, 0x100, 0x0, 0x0, {}, [@tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6}, @TCA_RATE={0x6}, @TCA_RATE={0x6}]}, 0x78}}, 0x4000045) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x80105014, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) executing program 2: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x8, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)={0x98, 0x0, 0x0, 0x0, 0x0, "", [@generic="54b3adb676a0efce7dcd0955efc42714b8ee7f16091c732c527071c1", @nested={0x4d, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}, @generic="69542ae0bb48405ce3ef9c7220ce3ba85b10bb1bd701c92bc5181c5d3e5327f23ff5640667", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}]}, @typed={0x7, 0x0, 0x0, 0x0, @str='#! '}, @nested={0x14, 0x0, 0x0, 0x1, [@generic, @typed={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x98}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x700, 0x8, 0x1, 0x9, {{0x1a, 0x4, 0x1, 0x7, 0x68, 0x67, 0x0, 0x0, 0x2f, 0x0, @multicast2, @dev, {[@timestamp_addr={0x44, 0x34, 0xe9, 0x1, 0x0, [{@empty, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@local, 0x2}, {@broadcast, 0x2}, {@private=0xa010101, 0x10}, {@private=0xa010101, 0x8}]}, @timestamp_addr={0x44, 0x14, 0xe2, 0x1, 0x0, [{@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @end]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r2, r1, 0xf, 0x1, 0x5}, 0x48) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000140)=""/231) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x28011, r1, 0x0) r3 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000340)={0x0, @local, @local}, &(0x7f0000000080)=0xfffffffffffffef5) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000380)={'gretap0\x00', &(0x7f00000004c0)={'syztnl0\x00', r2, 0x7800, 0x9afb7a8cfeab7878, 0x5, 0x4, {{0x44, 0x4, 0x0, 0x9, 0x110, 0x67, 0x0, 0x2, 0x2f, 0x0, @remote, @empty, {[@timestamp_addr={0x44, 0x24, 0x1d, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@multicast2, 0x3}, {@multicast2, 0x6}, {@broadcast, 0x8}]}, @cipso={0x86, 0x12, 0x3, [{0x7, 0xc, "fb25e0044ce9f320c843"}]}, @cipso={0x86, 0x50, 0x3, [{0x7, 0x7, "771c152c87"}, {0x6, 0xf, "761729277b96559258ba889d2e"}, {0x6, 0xd, "d078eb6ca7bd1e20b9328f"}, {0x7, 0xd, "d80b138f69e212e09c3512"}, {0x5, 0xb, "f3bab07420c769c762"}, {0x6, 0xf, "eb20fdfc508a81417bbe35445f"}]}, @timestamp_addr={0x44, 0x34, 0xbb, 0x1, 0x7, [{@multicast2, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf}, {@remote, 0x5}, {@broadcast, 0x8}, {@multicast1}, {@remote, 0x1}]}, @timestamp_prespec={0x44, 0x1c, 0xf8, 0x3, 0xf, [{@empty, 0x7}, {@multicast2, 0x8}, {@empty, 0x1}]}, @ssrr={0x89, 0x23, 0x6a, [@dev={0xac, 0x14, 0x14, 0x1e}, @dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010101, @local, @dev={0xac, 0x14, 0x14, 0x37}, @remote, @rand_addr=0x64010101, @multicast2]}]}}}}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) shmctl$IPC_RMID(0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0xa2, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000880)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) executing program 3: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xa0, 0x11, 0x148, 0xa0, 0x0, 0x178, 0x2a8, 0x2a8, 0x178, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) syz_io_uring_setup(0x2cd7, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r0, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000002100010000000000000000000a0014000000000000000000"], 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$kcm(0x2, 0x0, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000002200)={@val={0xc}, @val={0x1}, @mpls={[], @ipv4=@generic={{0x5, 0x4, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @dev}, "ec"}}}, 0x23) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000080)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'gre0\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xaf}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x64, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = syz_open_dev$amidi(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r5, 0x80045700, &(0x7f00000001c0)) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x101301) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, r2, 0x0) syz_usb_connect(0xc, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0xed, 0x7f, 0x3f, 0x8, 0x6a9, 0xe, 0xe31e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x74, 0x0, 0x0, 0xea, 0xaa, 0x29}}]}}]}}, 0x0) executing program 4: pipe(0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @loopback}}, 0x31) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x15e10}], 0x1, 0x0, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000080)=0x0) socket$inet6_sctp(0xa, 0x1, 0x84) wait4(r6, &(0x7f00000000c0), 0x40000000, 0x0) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$nl_route_sched_retired(r2, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f0000001680)=@deltfilter={0xe4, 0x2d, 0x0, 0x0, 0x0, {}, [@f_tcindex={{0xc}, {0xb4, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x4}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x1, 0xc}}, @TCA_TCINDEX_ACT={0x88, 0x7, [@m_ct={0x84, 0x15, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}]}, {0x51, 0x6, "0e7c27384572b4e6acc7fbcf2ff4853f9c9a9be2037ecf934cb2f8cddb288672ae0a1f342844c89dfdeabbb31af897cf5dae25aaa9b377467286a5797be3e0d1638658c839414c691eb3c11670"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x85f0}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x3}]}}]}, 0xe4}}, 0x0) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1, 0x0, 0xb}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1={0x2, 0x0}, 0x0, 0x0, 0x1, 0x3}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') writev(r7, &(0x7f0000000680)=[{&(0x7f00000000c0)="00612f39bd4bc08ba54cd846fd225b7008e1871afdb500c5d3d33d9d9837fbc6f5c6955891ea91a2be1381f584c75e7d2e2115936b8722a0f813ef56d8351b91be2ff39eade5395c645d6892be355cd0c98c3d934c98044a3e518d04beeb3b9cdaa0da5eed0c40c13cd4233882ff46103acfb16592f745809e43e37e1d74de9dad3d3e91fa7345e13a2148f8876c9155af1d5e4c99ecc47e38a8c648d6cc035bdef4d57f2717", 0xa6}, {&(0x7f0000000000)="34d2719429ae206c0b036aab21d6f25a874db2683740925826372947875a191b60e583316aa3f2b731e6be1124d36c3bf363ca38108fc204f2115f5c888ed8b9ad4d7d3d9d0ae3161ebf902129424a4961b0d1650551e052bce7f7586fec952ca814b6b86560a1969da4de0a7e6f891a81672d1c88c983f18b", 0x79}, {&(0x7f0000000180)="a23f66d54d6171fc1ae66b0caedb92ee4a117bb0d0c775b919ed4ea7420dc0c3ca046740a1fc2ce22dad211ea06ba6e8b51cad7808057c10bf7dbd9fe1ae2c44e3b9903c72a595ff70b6519a9ce5576095f7994b461e3e77f7297cb9772896c59bc7484278dc738518504472203ecbd73a92ebed3016e272bfea7951340cad3c14b76d2dc1a317fcd1db51c3bf04e0a65641b1eb28037cf6ae644395547b4c4761f2d766882cb3aff538a3bd598aef17defba142222e9da1404d3f7765eb5425d3073123168d30bc23190169eed70b9e937c9f5b5990db611d4c1097ba39c79caa13c4dbe4ac74d3", 0xe8}, {&(0x7f0000000380)="f321a2b7d00fbf59a12ffa37b3984aca59f1ee61a388f283411fe9c14fed6c24dd3bf149cb811fce82124f005991a9e2ea174a2dcbc2955dde31569d191f6b04ec1d97b46cc578f469c8c6bf01b5d3ae834dda29f2a840c2f9504f039f6c30869f27fbabe144a88c6379103ecdfb37ab1730f47642f138b5adcc3ba205d675579ece0a931de73cc05c32ceb5a8a0a90e7465bfebb01196f74855c2d518ce8fb3058ec75845405ff6bebbc66202386db6f19e1ef2ece6187d860f60857c3dbe9e1246b90e448de2901b4a0649288d93e5e0", 0xd1}, {&(0x7f0000000280)="635dbf35c28b1ab5093396fd5dd6b18540e95140dae95e63fdc07ff7f53e6dfe235f79f6d32dca2505103db91b9a24e5e9729d6e4b299715ac14fcdcf72b4aea3f2a28dbb987b22ca2568b02fb3fb0008677f42e76a5e922d1dfaf7016ef9b4ed25959d97ccf908c9e6474c000aaa76b560e0ddfbe8f03bca36bffbdc0d415f024595ba5", 0x84}, {&(0x7f0000000500)="7f2462566a4b272ce5a762325b43607e6b8c68ef2111d450e44d20aa7ed9c5ea0c58b366435af3c2e3c1536de8867442f5bcf2241d9aab8fcd5d214f7c61595eb1e356c2c7afe00ca7a1cdbe0fff4ed1d295958c2f94b3ba0c3cfed19c686451c5d2b88a0852d7f57e88e38063c4a44dd87da6ba78153add7eaa0cd62508f8", 0x7f}, {&(0x7f0000000580)="78d105061fc7c3bff548ac65d96d8d74f3ace7316983ed9af7567f017d015b34d81243b7f91f13556411651ed7aac1d36953d30d97e76c47db4a04f677dc460be4b7b936821a62c83acb6bfee824546cef960367e693d5d38da9174404d5a646ea", 0x61}, {&(0x7f0000000600)="eefa39e14ef9b5320cabf1a9ea740c7b3a7144166ad2e8c36b03d625273cf3df638ce5ffe4b2fcd597b532186e2caf5c3989cf6d9ae5747a2d22ce58f88ccc5d031d1b656cee2d9129c5439d0296515aa4208da556b04c1add125b1427f611", 0x5f}], 0x8) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='ext4_es_find_extent_range_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f00000003c0)={0x0, 0x80000001, @start={0x0, 0x0, "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", "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"}, [0x4d8, 0x100000001, 0xfff, 0x2, 0x4, 0xcda, 0xf3a, 0x201, 0x4, 0x6fa6, 0x24, 0x20, 0x1, 0x8000000000000000, 0x2, 0x4, 0x3, 0x9, 0x7fff, 0xa41, 0x0, 0x287d, 0x1, 0x2, 0x0, 0x9, 0x7, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5acc, 0x6, 0x2, 0x2, 0x80000001, 0x8, 0x20000000200, 0x5, 0x8, 0x2, 0x3b, 0x0, 0x0, 0x71, 0x5a, 0x4, 0x8, 0x4, 0x8, 0x2, 0xe93, 0x21, 0x5, 0x2, 0x3, 0x0, 0x1, 0xffffffffffffff4b, 0x2, 0x7, 0x1c00000000000000, 0x7]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="010d856aea454c8a48f680c20000ffaaaaaaaaaa03080045000028000000000002907800000000ffffffff11e0907800000000000100"], 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="64000000170a05000000000000000000000000000900020073797a31000002000c00054000000000000000030c000540000000000000000304000400000007400000000014000380080001400000000008000240000001010900010073"], 0x64}}, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@empty}, {@in6=@empty, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x4000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7}}]}, 0x154}}, 0x20004044) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1}, 0xc) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f00000000c0), 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001840)=@newtfilter={0x928, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x8fc, 0x2, [@TCA_U32_SEL={0x624, 0x5, {0x3, 0x18, 0x0, 0x4f, 0x3, 0xff, 0x1000, 0x7, [{0x5, 0x0, 0x1ff, 0x400}, {0x0, 0x7, 0x5, 0x3f}, {0x5, 0x6, 0x1, 0xff}, {0x8001, 0x1f, 0x128c45f3, 0x8}, {0xdbc, 0x4, 0x2, 0xffffff34}, {0x3, 0x80000000, 0x7e25be85, 0x9}, {0xfff, 0x101, 0x0, 0x100}, {0x2, 0x5, 0x2, 0x5}, {0x6, 0x4, 0x0, 0xa0}, {0x3f, 0x1, 0x10001, 0x20}, {0x1, 0xd1, 0x400, 0x80000000}, {0x3, 0x7fff, 0x8, 0x9}, {0x6, 0x2, 0x40, 0x7}, {0x3, 0x8c, 0x81}, {0x10001, 0x2, 0x3, 0x9}, {0x3c, 0x1, 0x2, 0x8}, {0x1, 0x0, 0x4, 0xcca6}, {0x2, 0xfff, 0x8}, {0x6, 0x9a5, 0x2, 0xce0}, {0x0, 0x7fff}, {0xac, 0x3ff, 0x3ff, 0xffffffff}, {0x0, 0x4, 0x7ff}, {0x0, 0xd59, 0xb2af}, {0x5, 0x1ff, 0x9, 0x2}, {0x4, 0x0, 0x7fffffff, 0x8}, {0xff, 0x0, 0x40, 0x8001}, {0x400, 0x0, 0x0, 0x1ff}, {0x101, 0x4, 0x8006, 0x9}, {0x0, 0x1ff, 0xfffffff7, 0x8}, {0x0, 0x7, 0x4, 0x1}, {0x7, 0x1, 0x401, 0x7}, {0x3, 0x0, 0x104, 0xea6}, {0x9, 0x8, 0x80000000, 0xc689}, {0x1, 0x2f3, 0x3, 0x9}, {0x3, 0x7f, 0x1, 0x10001}, {0x80000001, 0x10000, 0x8, 0xffff}, {0x8000, 0x7, 0x3, 0x3}, {0x0, 0x1419, 0x3, 0x631b}, {0x3c, 0x4, 0x7fffffff, 0x7f}, {0x40, 0x53, 0x8, 0x5}, {0x6, 0x9, 0x200, 0x4}, {0x40, 0x64f, 0x9, 0x6}, {0x6, 0xffffffff, 0x0, 0x401}, {0x180000, 0x400, 0x0, 0x7}, {0x5, 0x1000, 0x7, 0x1}, {0x0, 0x0, 0x0, 0x7fffffff}, {0xf0c, 0x8000, 0xf26, 0x36}, {0xa, 0x8003, 0xfffffff7, 0x4}, {0x200, 0x835, 0x5, 0x8}, {0x0, 0x7}, {0xff, 0x400, 0x7, 0x2}, {0x8001, 0x2, 0x5, 0xfff}, {0x4, 0x1, 0x180, 0x6}, {0x6, 0x4, 0x63, 0x8}, {0x7fff, 0x1, 0x9, 0x5}, {0x2, 0x3, 0x57, 0x5}, {0x401, 0x1, 0x0, 0x7}, {0x2, 0x29ea, 0x2, 0x6}, {0x4, 0x8a4, 0x5, 0x2}, {0x101, 0x1, 0xff, 0x7}, {0xffff4130, 0xa50, 0x4, 0x7}, {0x5, 0x28, 0x3ff, 0x37c0}, {0xff, 0x4, 0x0, 0x2}, {0x0, 0x10001, 0x0, 0xfffffa2a}, {0x9, 0x20, 0xbf1, 0x9}, {0xff, 0x5bb, 0x42, 0x6}, {0x4, 0x6, 0x9, 0x1700000}, {0x10000, 0x1, 0x0, 0x8000}, {0x1f, 0x84a8, 0x101, 0x7}, {0x6, 0x8c, 0x5e32, 0x6}, {0xfffffffe, 0x401, 0xa99b, 0xff}, {0x1, 0x101, 0x8, 0x5}, {0x1, 0x3, 0x0, 0x3f}, {0x7, 0x9, 0xffff, 0x4}, {0x0, 0x80000001, 0x1, 0x4d}, {0x80, 0x8, 0x8, 0x200}, {0xcdf, 0x3, 0xfffffff7, 0x9b5a}, {0x5, 0x0, 0xb0, 0x8}, {0xfffffffc, 0x100, 0x2, 0x20}, {0x1, 0x4, 0x0, 0x7}, {0x6, 0xfffffff8, 0x4, 0x2}, {0x100, 0xe530, 0x2, 0x40}, {0x9, 0x80, 0x0, 0x7f}, {0x62, 0xc4000000, 0x7, 0x4}, {0xfff, 0xfffffffc, 0x1, 0x101}, {0x0, 0x7, 0xfffffbff, 0xd72e}, {0x6f, 0x9, 0xfffffffd, 0x7fff}, {0x0, 0x10001, 0x3}, {0x2, 0x10001, 0x4, 0x3}, {0x5, 0xa4e, 0x400, 0x81}, {0x66e, 0x80000000, 0x7, 0x1}, {0x8, 0x81, 0x80000000}, {0x5, 0xdf5d, 0x430, 0x8}, {0x50, 0x7, 0x81, 0x9}, {0x0, 0x8e, 0x1, 0xf}, {0x6, 0x9, 0x3, 0x6}, {0x8e, 0xc, 0x2, 0x6}]}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x1}, @TCA_U32_LINK={0x8, 0x3, 0xc52}, @TCA_U32_HASH={0x8, 0x2, 0x7}, @TCA_U32_ACT={0x2a8, 0x7, [@m_vlan={0xe4, 0x0, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3ff, 0x7, 0x10000000, 0x72}}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa95}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xeff}]}, {0x72, 0x6, "1b61b720e1ca1644a1e6002380cc72927d91efa590298168e9f9a7f667e099e1151c0705c2f05205f328346e708c498266affafb1b00fe585e3a2de8311e409087d94550ca1172451bd2a48c13320166ccf83c8163830bc16daaf995762bdbc632e600876b8f77e7db73d8c85908"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x1c0, 0x0, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xc50, 0x0, 0x6, 0x8}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x800, 0x2, 0x73, 0x5}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0xff, 0x3, 0xb, 0xf7}, 0x71}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffdd, 0x42d, 0x20000000, 0xb77e, 0x40}, 0x53}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x20000000, 0x7, 0x5}, 0x19}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7b, 0x1ff, 0x8, 0x8, 0x7fff}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x8, 0x4, 0x9a5}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x9e, 0x10000000, 0x1, 0xfffffab8}, 0xc}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7fff, 0x4, 0xff, 0x5}, 0x71}}]}, {0x96, 0x6, "ab8f059a226ae84317d0bddb27c2d19f87bba9babeb2fb153fc50fe781f5fb17d40267d4f679acb1709ff9c8ea94041e24badd2e2920e1638076d2c37768421cf0197ef454792b2b4c3a5ddfba6462e454a96a1f577ab67a92a65a69760ca47f22fa1c00ca3e95cb58fb7f6bcf4dcc14f781dcee7fffdebf10a28d6068e6e2d32e812be5ed0ce4cc8f6db382ab090d30f5ad"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_U32_INDEV={0x14, 0x8, 'vlan1\x00'}]}}]}, 0x928}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000003f40)=@raw={'raw\x00', 0x4001, 0x3, 0x208, 0x0, 0x0, 0x148, 0x0, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @loopback, 0x0, 0x0, 'ip6gretap0\x00', 'bridge0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ip={@local, @loopback, 0x0, 0x0, 'wlan0\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = open(&(0x7f0000000080)='./file0\x00', 0x189040, 0x189) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000fc0)=ANY=[@ANYRES8=r3, @ANYRESDEC=r2, @ANYRESOCT, @ANYRESHEX=r2, @ANYBLOB="eb15761f1b28b725188bab893ddd63a00fe271d5a54fbeed6226a8ade6b6a08794729d188544dbb2279713f0778dc5142d929db63071e80e3b3423894f3e3f92e807158eff5ba05f"], 0x14}}, 0x0) r7 = dup3(r4, r1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_io_uring_setup(0x18a, &(0x7f0000000580), &(0x7f00006d5000), &(0x7f0000216000)) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r8}, 0x4) recvmmsg(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000200)=""/108, 0x6c}, {&(0x7f0000000740)=""/208, 0xd0}, {&(0x7f0000000840)=""/200, 0xc8}, {&(0x7f0000000280)=""/65, 0x41}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f00000003c0)=""/63, 0x3f}, {&(0x7f0000000940)=""/233, 0xe9}, {&(0x7f0000000a40)=""/131, 0x83}, {&(0x7f0000000b00)=""/124, 0x7c}, {&(0x7f0000000b80)=""/192, 0xc0}], 0xa, &(0x7f0000000d00)=""/114, 0x72}, 0x81}], 0x1, 0x10142, &(0x7f0000000d80)={0x0, 0x989680}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x10, &(0x7f0000001080)=ANY=[@ANYBLOB="12cf77411731164cfbdb963efece829df6765815097ecdeb9b8bc626b2f191a538750a2ddd7e215dce0c264ca6edd97e16350a18838ea2b9477d2e328ee0ac8a50fb99c274be1c5fa64ae6e0270c532b16fcd05eafa589348fb876a80735d88032949fe7ae33f04868da60ff18c1d3d55435affdbdc97cd6609527f8fb1d14cea2157e973696c40694b40dd53b3fe03969d0d3c2aa119f78ffe854f384e2357b2e75c19c81968220820eff691c28c75a875c828e39f31fa60da5912dbe3ce9dff05d2d4e58f589f2fbb5cb9b40f3462b9ada9ecc83eac6ddb47ff20f5e4102e7962d02e0a567730b6636be541d2785", @ANYRES16=r6], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x9, &(0x7f0000002840), 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r9, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r7, 0x40047211, &(0x7f00000000c0)=0x4) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030b0000000000000000000000010009000000200003000600000000000200000000000000000000000000000002000100f4f7ffffffff050b00000000030005000000000002"], 0x58}, 0x1, 0x7}, 0x0) executing program 4: pipe(0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x15e10}], 0x1, 0x0, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x8}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffb}, @TCA_NETEM_RATE64={0xc, 0x8, 0x654534bf5327d02e}, @TCA_NETEM_RATE={0x14}]}}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) fchdir(0xffffffffffffffff) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r4, &(0x7f0000000100)="0503460008003e00000002008100", 0x36, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000400)=""/25, 0x19}, {0x0}, {&(0x7f0000000440)=""/143, 0x8f}, {&(0x7f0000000980)=""/4096, 0x1000}], &(0x7f0000000700), 0x6}, 0x20) r7 = socket$kcm(0x10, 0x2, 0x4) close(r7) socket$kcm(0x10, 0x2, 0x0) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000040)={0x1d, r9, 0x3}, 0x18) sendmmsg(r8, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000100)="e8", 0x1}], 0x2}}], 0x1, 0x0) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x0, 0x4000) r10 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7f, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x1, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3314c94970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) ioctl$vim2m_VIDIOC_STREAMON(r10, 0x40045612, &(0x7f0000000000)=0x1) executing program 2: pipe(0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @loopback}}, 0x31) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x15e10}], 0x1, 0x0, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000080)=0x0) socket$inet6_sctp(0xa, 0x1, 0x84) wait4(r6, &(0x7f00000000c0), 0x40000000, 0x0) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$nl_route_sched_retired(r2, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f0000001680)=@deltfilter={0xe4, 0x2d, 0x0, 0x0, 0x0, {}, [@f_tcindex={{0xc}, {0xb4, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x4}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x1, 0xc}}, @TCA_TCINDEX_ACT={0x88, 0x7, [@m_ct={0x84, 0x15, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}]}, {0x51, 0x6, "0e7c27384572b4e6acc7fbcf2ff4853f9c9a9be2037ecf934cb2f8cddb288672ae0a1f342844c89dfdeabbb31af897cf5dae25aaa9b377467286a5797be3e0d1638658c839414c691eb3c11670"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x85f0}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x3}]}}]}, 0xe4}}, 0x0) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1, 0x0, 0xb}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1={0x2, 0x0}, 0x0, 0x0, 0x1, 0x3}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') writev(r7, &(0x7f0000000680)=[{&(0x7f00000000c0)="00612f39bd4bc08ba54cd846fd225b7008e1871afdb500c5d3d33d9d9837fbc6f5c6955891ea91a2be1381f584c75e7d2e2115936b8722a0f813ef56d8351b91be2ff39eade5395c645d6892be355cd0c98c3d934c98044a3e518d04beeb3b9cdaa0da5eed0c40c13cd4233882ff46103acfb16592f745809e43e37e1d74de9dad3d3e91fa7345e13a2148f8876c9155af1d5e4c99ecc47e38a8c648d6cc035bdef4d57f2717", 0xa6}, {&(0x7f0000000000)="34d2719429ae206c0b036aab21d6f25a874db2683740925826372947875a191b60e583316aa3f2b731e6be1124d36c3bf363ca38108fc204f2115f5c888ed8b9ad4d7d3d9d0ae3161ebf902129424a4961b0d1650551e052bce7f7586fec952ca814b6b86560a1969da4de0a7e6f891a81672d1c88c983f18b", 0x79}, {&(0x7f0000000180)="a23f66d54d6171fc1ae66b0caedb92ee4a117bb0d0c775b919ed4ea7420dc0c3ca046740a1fc2ce22dad211ea06ba6e8b51cad7808057c10bf7dbd9fe1ae2c44e3b9903c72a595ff70b6519a9ce5576095f7994b461e3e77f7297cb9772896c59bc7484278dc738518504472203ecbd73a92ebed3016e272bfea7951340cad3c14b76d2dc1a317fcd1db51c3bf04e0a65641b1eb28037cf6ae644395547b4c4761f2d766882cb3aff538a3bd598aef17defba142222e9da1404d3f7765eb5425d3073123168d30bc23190169eed70b9e937c9f5b5990db611d4c1097ba39c79caa13c4dbe4ac74d3", 0xe8}, {&(0x7f0000000380)="f321a2b7d00fbf59a12ffa37b3984aca59f1ee61a388f283411fe9c14fed6c24dd3bf149cb811fce82124f005991a9e2ea174a2dcbc2955dde31569d191f6b04ec1d97b46cc578f469c8c6bf01b5d3ae834dda29f2a840c2f9504f039f6c30869f27fbabe144a88c6379103ecdfb37ab1730f47642f138b5adcc3ba205d675579ece0a931de73cc05c32ceb5a8a0a90e7465bfebb01196f74855c2d518ce8fb3058ec75845405ff6bebbc66202386db6f19e1ef2ece6187d860f60857c3dbe9e1246b90e448de2901b4a0649288d93e5e0", 0xd1}, {&(0x7f0000000280)="635dbf35c28b1ab5093396fd5dd6b18540e95140dae95e63fdc07ff7f53e6dfe235f79f6d32dca2505103db91b9a24e5e9729d6e4b299715ac14fcdcf72b4aea3f2a28dbb987b22ca2568b02fb3fb0008677f42e76a5e922d1dfaf7016ef9b4ed25959d97ccf908c9e6474c000aaa76b560e0ddfbe8f03bca36bffbdc0d415f024595ba5", 0x84}, {&(0x7f0000000500)="7f2462566a4b272ce5a762325b43607e6b8c68ef2111d450e44d20aa7ed9c5ea0c58b366435af3c2e3c1536de8867442f5bcf2241d9aab8fcd5d214f7c61595eb1e356c2c7afe00ca7a1cdbe0fff4ed1d295958c2f94b3ba0c3cfed19c686451c5d2b88a0852d7f57e88e38063c4a44dd87da6ba78153add7eaa0cd62508f8", 0x7f}, {&(0x7f0000000580)="78d105061fc7c3bff548ac65d96d8d74f3ace7316983ed9af7567f017d015b34d81243b7f91f13556411651ed7aac1d36953d30d97e76c47db4a04f677dc460be4b7b936821a62c83acb6bfee824546cef960367e693d5d38da9174404d5a646ea", 0x61}, {&(0x7f0000000600)="eefa39e14ef9b5320cabf1a9ea740c7b3a7144166ad2e8c36b03d625273cf3df638ce5ffe4b2fcd597b532186e2caf5c3989cf6d9ae5747a2d22ce58f88ccc5d031d1b656cee2d9129c5439d0296515aa4208da556b04c1add125b1427f611", 0x5f}], 0x8) executing program 3: keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x4, 0x0) set_mempolicy_home_node(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x6, 0x0) capset(&(0x7f0000000080)={0x20080522, r3}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYBLOB="00042dbd7000fedbdf251400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000f82c000000050029000c000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x501000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000100)) executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xa7, 0xa3, 0xb1, 0x20, 0x9fb, 0xebbe, 0xeafe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7a, 0x25, 0xe0, 0x0, [], [{{0x9, 0x5, 0x0, 0x3}}]}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) executing program 3: ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)={0x73, 0x0, 0xfc, 0x0, 0xffffffff, 0xa, 0x7f, 0x7, 0x0, 0x0, 0xc, 0x7, 0x0, 0x5, 0x4, 0xba, 0x0, 0x4, 0x1, '\x00', 0x0, 0x9}) socket$caif_stream(0x25, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r3, 0x0, r2) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000080)) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x0, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) openat$cgroup_ro(r0, &(0x7f0000000200)='pids.current\x00', 0x275a, 0x0) memfd_create(&(0x7f00000006c0)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\a\x00;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\xb7/\xa5\xa7\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e1\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84,\xd3\x06\xaeO \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x00\x04\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2Cw\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93\x00\x00', 0xd) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_usb_connect(0x1, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a86200000904000002ca744d07090503020000ff99090805848f"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1401}}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000380)) syz_open_dev$char_usb(0xc, 0xb4, 0xc936) syz_usb_disconnect(r5) r6 = socket$can_raw(0x1d, 0x3, 0x1) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) setsockopt(r6, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000040)=0xfffffeb5, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=@deltclass={0x78, 0x29, 0x100, 0x0, 0x0, {}, [@tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6}, @TCA_RATE={0x6}, @TCA_RATE={0x6}]}, 0x78}}, 0x4000045) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x80105014, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) program did not crash replaying the whole log did not cause a kernel crash single: executing 5 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$nl_route_sched-socket-sendto-openat$audio-ioctl$SNDCTL_DSP_SETTRIGGER-socket$inet_udp-setsockopt$SO_TIMESTAMPING-connect$inet-sendmmsg-setsockopt$inet_int-setsockopt$inet_int-recvmmsg detailed listing: executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=@deltclass={0x78, 0x29, 0x100, 0x0, 0x0, {}, [@tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6}, @TCA_RATE={0x6}, @TCA_RATE={0x6}]}, 0x78}}, 0x4000045) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x80105014, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_SET_VCPU_EVENTS-socket$caif_stream-prctl$PR_SCHED_CORE-openat-sched_setaffinity-openat$hwrng-openat$ttyS3-openat$mixer-fcntl$dupfd-ioctl$SOUND_MIXER_READ_STEREODEVS-preadv-socket$igmp6-setsockopt$IP6T_SO_SET_REPLACE-setsockopt$IP6T_SO_SET_REPLACE-openat$cgroup_ro-memfd_create-socket$nl_route-syz_usb_connect-getsockopt$sock_cred-syz_open_dev$char_usb-syz_usb_disconnect-socket$can_raw-madvise-setsockopt-setsockopt$CAN_RAW_ERR_FILTER-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_raw-prctl$PR_SET_SYSCALL_USER_DISPATCH_ON detailed listing: executing program 0: ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)={0x73, 0x0, 0xfc, 0x0, 0xffffffff, 0xa, 0x7f, 0x7, 0x0, 0x0, 0xc, 0x7, 0x0, 0x5, 0x4, 0xba, 0x0, 0x4, 0x1, '\x00', 0x0, 0x9}) socket$caif_stream(0x25, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r3, 0x0, r2) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000080)) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x0, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) openat$cgroup_ro(r0, &(0x7f0000000200)='pids.current\x00', 0x275a, 0x0) memfd_create(&(0x7f00000006c0)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\a\x00;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\xb7/\xa5\xa7\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e1\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84,\xd3\x06\xaeO \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x00\x04\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2Cw\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93\x00\x00', 0xd) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_usb_connect(0x1, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a86200000904000002ca744d07090503020000ff99090805848f"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1401}}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000380)) syz_open_dev$char_usb(0xc, 0xb4, 0xc936) syz_usb_disconnect(r5) r6 = socket$can_raw(0x1d, 0x3, 0x1) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) setsockopt(r6, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000040)=0xfffffeb5, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_genetlink_get_family_id$mptcp detailed listing: executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xa7, 0xa3, 0xb1, 0x20, 0x9fb, 0xebbe, 0xeafe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7a, 0x25, 0xe0, 0x0, [], [{{0x9, 0x5, 0x0, 0x3}}]}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-bind$inet6-socket$nl_route-socket-sendmsg$BATADV_CMD_GET_MESH-getsockname$packet-prctl$PR_MCE_KILL-sendmsg$nl_route-sendmsg$nl_route_sched-socket$packet-socket-sendmsg$nl_route_sched-getsockname$packet-fchdir-bind$packet-sendto$inet6-io_uring_register$IORING_REGISTER_FILES_UPDATE2-socket$kcm-close-socket$kcm-socket-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-sendmmsg-mknod$loop-setxattr$incfs_metadata-syz_open_dev$video-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_CREATE_BUFS-ioctl$vim2m_VIDIOC_STREAMON detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x8}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffb}, @TCA_NETEM_RATE64={0xc, 0x8, 0x654534bf5327d02e}, @TCA_NETEM_RATE={0x14}]}}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) fchdir(0xffffffffffffffff) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r4, &(0x7f0000000100)="0503460008003e00000002008100", 0x36, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000400)=""/25, 0x19}, {0x0}, {&(0x7f0000000440)=""/143, 0x8f}, {&(0x7f0000000980)=""/4096, 0x1000}], &(0x7f0000000700), 0x6}, 0x20) r7 = socket$kcm(0x10, 0x2, 0x4) close(r7) socket$kcm(0x10, 0x2, 0x0) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000040)={0x1d, r9, 0x3}, 0x18) sendmmsg(r8, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000100)="e8", 0x1}], 0x2}}], 0x1, 0x0) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x0, 0x4000) r10 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7f, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x1, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3314c94970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) ioctl$vim2m_VIDIOC_STREAMON(r10, 0x40045612, &(0x7f0000000000)=0x1) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$igmp-userfaultfd-ioctl$UFFDIO_API-io_uring_setup-syz_io_uring_setup-syz_io_uring_setup-socket$tipc-socket$tipc-bind$tipc-bind$tipc-bind$tipc-bind$tipc-bind$tipc-close_range-openat$userio-socket$nl_xfrm-socket$inet_udp-openat$udambuf-pselect6 detailed listing: executing program 0: socket$igmp(0x2, 0x3, 0x2) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = io_uring_setup(0x1f2a, &(0x7f0000000000)={0x0, 0x693e, 0x80, 0x3, 0x150}) syz_io_uring_setup(0x7934, &(0x7f0000000200)={0x0, 0x0, 0x200, 0x0, 0x0, 0x0, r1}, 0x0, 0x0) syz_io_uring_setup(0xa91, &(0x7f00000002c0), 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) pselect6(0x40, &(0x7f00000001c0)={0x2fe}, 0x0, 0x0, 0x0, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 1m40s testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 22, 29, 30, 26, 6, 12, 8, 2, 20, 3, 22, 30, 19, 4, 27, 30, 12, 26, 26, 29, 22, 27, 20, 30, 29, 27, 2, 28, 12] detailed listing: executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x5, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/ipc\x00') socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) socket$inet6(0xa, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1f02ffff0000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8], 0x40}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000064000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f280011800e000100636f6e6e6c696d6974000000140002800800024000001c00080001"], 0xac}}, 0x0) socket(0x10, 0x3, 0x0) executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100005bc1fa20cf106880fd2e0000000109021200010000000009040000000714ef007540a2f73086bb8b2a64268c23709e32acef66de68565556af82075e988898e9133cf05e1a4808bd9985c6b92eda388b2730f4"], 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) sendmsg$tipc(r1, &(0x7f0000002340)={&(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10, 0x0}, 0x20008800) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x3, &(0x7f0000003380)=ANY=[], 0x0, 0x0, 0xb7, &(0x7f0000000040)=""/183, 0x41100, 0x0, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) socket$kcm(0x29, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x3c, 0x0, 0x11, @empty, @remote, 0x80, 0x7800}}) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x4161, 0x0) socket$nl_generic(0x10, 0x3, 0x10) executing program 1: pipe(0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @loopback}}, 0x31) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x15e10}], 0x1, 0x0, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000080)=0x0) socket$inet6_sctp(0xa, 0x1, 0x84) wait4(r6, &(0x7f00000000c0), 0x40000000, 0x0) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$nl_route_sched_retired(r2, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f0000001680)=@deltfilter={0xe4, 0x2d, 0x0, 0x0, 0x0, {}, [@f_tcindex={{0xc}, {0xb4, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x4}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x1, 0xc}}, @TCA_TCINDEX_ACT={0x88, 0x7, [@m_ct={0x84, 0x15, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}]}, {0x51, 0x6, "0e7c27384572b4e6acc7fbcf2ff4853f9c9a9be2037ecf934cb2f8cddb288672ae0a1f342844c89dfdeabbb31af897cf5dae25aaa9b377467286a5797be3e0d1638658c839414c691eb3c11670"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x85f0}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x3}]}}]}, 0xe4}}, 0x0) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1, 0x0, 0xb}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1={0x2, 0x0}, 0x0, 0x0, 0x1, 0x3}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') writev(r7, &(0x7f0000000680)=[{&(0x7f00000000c0)="00612f39bd4bc08ba54cd846fd225b7008e1871afdb500c5d3d33d9d9837fbc6f5c6955891ea91a2be1381f584c75e7d2e2115936b8722a0f813ef56d8351b91be2ff39eade5395c645d6892be355cd0c98c3d934c98044a3e518d04beeb3b9cdaa0da5eed0c40c13cd4233882ff46103acfb16592f745809e43e37e1d74de9dad3d3e91fa7345e13a2148f8876c9155af1d5e4c99ecc47e38a8c648d6cc035bdef4d57f2717", 0xa6}, {&(0x7f0000000000)="34d2719429ae206c0b036aab21d6f25a874db2683740925826372947875a191b60e583316aa3f2b731e6be1124d36c3bf363ca38108fc204f2115f5c888ed8b9ad4d7d3d9d0ae3161ebf902129424a4961b0d1650551e052bce7f7586fec952ca814b6b86560a1969da4de0a7e6f891a81672d1c88c983f18b", 0x79}, {&(0x7f0000000180)="a23f66d54d6171fc1ae66b0caedb92ee4a117bb0d0c775b919ed4ea7420dc0c3ca046740a1fc2ce22dad211ea06ba6e8b51cad7808057c10bf7dbd9fe1ae2c44e3b9903c72a595ff70b6519a9ce5576095f7994b461e3e77f7297cb9772896c59bc7484278dc738518504472203ecbd73a92ebed3016e272bfea7951340cad3c14b76d2dc1a317fcd1db51c3bf04e0a65641b1eb28037cf6ae644395547b4c4761f2d766882cb3aff538a3bd598aef17defba142222e9da1404d3f7765eb5425d3073123168d30bc23190169eed70b9e937c9f5b5990db611d4c1097ba39c79caa13c4dbe4ac74d3", 0xe8}, {&(0x7f0000000380)="f321a2b7d00fbf59a12ffa37b3984aca59f1ee61a388f283411fe9c14fed6c24dd3bf149cb811fce82124f005991a9e2ea174a2dcbc2955dde31569d191f6b04ec1d97b46cc578f469c8c6bf01b5d3ae834dda29f2a840c2f9504f039f6c30869f27fbabe144a88c6379103ecdfb37ab1730f47642f138b5adcc3ba205d675579ece0a931de73cc05c32ceb5a8a0a90e7465bfebb01196f74855c2d518ce8fb3058ec75845405ff6bebbc66202386db6f19e1ef2ece6187d860f60857c3dbe9e1246b90e448de2901b4a0649288d93e5e0", 0xd1}, {&(0x7f0000000280)="635dbf35c28b1ab5093396fd5dd6b18540e95140dae95e63fdc07ff7f53e6dfe235f79f6d32dca2505103db91b9a24e5e9729d6e4b299715ac14fcdcf72b4aea3f2a28dbb987b22ca2568b02fb3fb0008677f42e76a5e922d1dfaf7016ef9b4ed25959d97ccf908c9e6474c000aaa76b560e0ddfbe8f03bca36bffbdc0d415f024595ba5", 0x84}, {&(0x7f0000000500)="7f2462566a4b272ce5a762325b43607e6b8c68ef2111d450e44d20aa7ed9c5ea0c58b366435af3c2e3c1536de8867442f5bcf2241d9aab8fcd5d214f7c61595eb1e356c2c7afe00ca7a1cdbe0fff4ed1d295958c2f94b3ba0c3cfed19c686451c5d2b88a0852d7f57e88e38063c4a44dd87da6ba78153add7eaa0cd62508f8", 0x7f}, {&(0x7f0000000580)="78d105061fc7c3bff548ac65d96d8d74f3ace7316983ed9af7567f017d015b34d81243b7f91f13556411651ed7aac1d36953d30d97e76c47db4a04f677dc460be4b7b936821a62c83acb6bfee824546cef960367e693d5d38da9174404d5a646ea", 0x61}, {&(0x7f0000000600)="eefa39e14ef9b5320cabf1a9ea740c7b3a7144166ad2e8c36b03d625273cf3df638ce5ffe4b2fcd597b532186e2caf5c3989cf6d9ae5747a2d22ce58f88ccc5d031d1b656cee2d9129c5439d0296515aa4208da556b04c1add125b1427f611", 0x5f}], 0x8) executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000280)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) r3 = syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000580)='./file0\x00', 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,default_permissions,obj_role='], 0x0, 0x0, 0x0) mknodat(r3, &(0x7f0000000700)='./file0\x00', 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x5d, &(0x7f0000000040)=0x10041) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000013c0)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$dsp(r5, &(0x7f0000000440)=""/171, 0xab) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000}) r6 = syz_open_dev$video4linux(&(0x7f0000000200), 0x74, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r6, 0xc040564b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x1}) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000000000000000000000000000000000000000000006000000000000000700000000000000fdffffffffffffff06000000000000000000001000000000000000000000000000200000000000000000000000000000020000000000000003000000000000000000000000000000000000000000000000000000000000ed2d5fe5909e4fbc0000000000000000000180000000000000ff01020000000000000000000000000000000000000000000000000000000000021400000000000000140000000000000200000000000000ff7f000000000000010000000100000000000000000000000000000000000000000000000000000000000000000000000180000000000000080000000000000003000000000000000000000000000000000000000000000088060000000000000000000000000000f9ffdfffeaffffff00000000000000000000000000000000000000000000000000000000000000000200"/368]) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0xb, r7, 0x0, r2}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300ef}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000180)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000100), 0xffff, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f0000000040)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/12, 0xc}, {&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000040)=""/216, 0xd8}], 0x3, 0x5, 0xec) executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x8, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)={0x98, 0x0, 0x0, 0x0, 0x0, "", [@generic="54b3adb676a0efce7dcd0955efc42714b8ee7f16091c732c527071c1", @nested={0x4d, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}, @generic="69542ae0bb48405ce3ef9c7220ce3ba85b10bb1bd701c92bc5181c5d3e5327f23ff5640667", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}]}, @typed={0x7, 0x0, 0x0, 0x0, @str='#! '}, @nested={0x14, 0x0, 0x0, 0x1, [@generic, @typed={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x98}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x700, 0x8, 0x1, 0x9, {{0x19, 0x4, 0x1, 0x7, 0x64, 0x67, 0x0, 0x0, 0x2f, 0x0, @multicast2, @dev, {[@timestamp_addr={0x44, 0x34, 0xe9, 0x1, 0x0, [{@empty, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@local, 0x2}, {@broadcast, 0x2}, {@private=0xa010101, 0x10}, {@private=0xa010101, 0x8}]}, @timestamp_addr={0x44, 0x14, 0xe2, 0x1, 0x0, [{@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @end, @cipso={0x86, 0x6}, @end]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r2, r1, 0xf, 0x1, 0x5}, 0x48) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000140)=""/231) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x28011, r1, 0x0) r3 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000340)={0x0, @local, @local}, &(0x7f0000000080)=0xfffffffffffffef5) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000380)={'gretap0\x00', &(0x7f00000004c0)={'syztnl0\x00', r2, 0x7800, 0x9afb7a8cfeab7878, 0x5, 0x4, {{0x44, 0x4, 0x0, 0x9, 0x110, 0x67, 0x0, 0x2, 0x2f, 0x0, @remote, @empty, {[@timestamp_addr={0x44, 0x24, 0x1d, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@multicast2, 0x3}, {@multicast2, 0x6}, {@broadcast, 0x8}]}, @cipso={0x86, 0x12, 0x3, [{0x7, 0xc, "fb25e0044ce9f320c843"}]}, @cipso={0x86, 0x50, 0x3, [{0x7, 0x7, "771c152c87"}, {0x6, 0xf, "761729277b96559258ba889d2e"}, {0x6, 0xd, "d078eb6ca7bd1e20b9328f"}, {0x7, 0xd, "d80b138f69e212e09c3512"}, {0x5, 0xb, "f3bab07420c769c762"}, {0x6, 0xf, "eb20fdfc508a81417bbe35445f"}]}, @timestamp_addr={0x44, 0x34, 0xbb, 0x1, 0x7, [{@multicast2, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf}, {@remote, 0x5}, {@broadcast, 0x8}, {@multicast1}, {@remote, 0x1}]}, @timestamp_prespec={0x44, 0x1c, 0xf8, 0x3, 0xf, [{@empty, 0x7}, {@multicast2, 0x8}, {@empty, 0x1}]}, @ssrr={0x89, 0x23, 0x6a, [@dev={0xac, 0x14, 0x14, 0x1e}, @dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010101, @local, @dev={0xac, 0x14, 0x14, 0x37}, @remote, @rand_addr=0x64010101, @multicast2]}]}}}}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) shmctl$IPC_RMID(0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0xa2, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000880)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) executing program 1: r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick=0x9000000, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"9840365a80905ae7e5f175ec"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0xc4) executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=@deltclass={0x78, 0x29, 0x100, 0x0, 0x0, {}, [@tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6}, @TCA_RATE={0x6}, @TCA_RATE={0x6}]}, 0x78}}, 0x4000045) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x80105014, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x28011, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000077c0)={0x2020}, 0x2020) (fail_nth: 1) executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xa7, 0xa3, 0xb1, 0x20, 0x9fb, 0xebbe, 0xeafe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7a, 0x25, 0xe0, 0x0, [], [{{0x9, 0x5, 0x0, 0x3}}]}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) executing program 0: pipe(0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x15e10}], 0x1, 0x0, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c000000020605000000000000000000200020000900020073797a3200000000050004000000000005000100060000001400078008000640000000000800134000000000050005000a00000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100005bc1fa20cf106880fd2e0000000109021200010000000009040000000714ef007540a2f73086bb8b2a64268c23709e32acef66de68565556af82075e988898e9133cf05e1a4808bd9985c6b92eda388b2730f4"], 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) sendmsg$tipc(r1, &(0x7f0000002340)={&(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10, 0x0}, 0x20008800) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x3, &(0x7f0000003380)=ANY=[], 0x0, 0x0, 0xb7, &(0x7f0000000040)=""/183, 0x41100, 0x0, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) socket$kcm(0x29, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x3c, 0x0, 0x11, @empty, @remote, 0x80, 0x7800}}) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x4161, 0x0) socket$nl_generic(0x10, 0x3, 0x10) executing program 1: socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) io_setup(0x9, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000680)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000300)='3B', 0x2}]) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000025c0)="80", 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}}, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x270, &(0x7f00000006c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}, @void, {@mpls_uc={0x8847, {[{0x973}, {0x2, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x6}], @ipv4=@tcp={{0x4e, 0x4, 0x0, 0x1, 0x252, 0x65, 0x0, 0x9, 0x6, 0x0, @broadcast, @remote, {[@cipso={0x86, 0x54, 0x1, [{0x0, 0xe, "98c344748d2c7fdf0a783281"}, {0x2, 0x8, "b1ebeb4b9424"}, {0x7, 0x3, "f0"}, {0x5, 0xd, "5dba2a4912de458101990c"}, {0x7, 0xd, "d187162243c593023f1799"}, {0x6, 0xe, "5ee0a06651ab4cee52ea4d10"}, {0x2, 0xd, "736305fcb05a5cb042e0ae"}]}, @timestamp_prespec={0x44, 0x1c, 0xc2, 0x3, 0xa, [{@loopback, 0x4}, {@loopback, 0x401}, {@dev={0xac, 0x14, 0x14, 0x3a}}]}, @timestamp_addr={0x44, 0x24, 0xa7, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40}, {@multicast2, 0xc00000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010102}]}, @cipso={0x86, 0x67, 0x3, [{0x6, 0x12, "19a6c1f18177c9998c04452266f92e93"}, {0x6, 0x12, "00000000040800000000000000000a00"}, {0x7, 0xa, "6b00424306db853d"}, {0x0, 0x8, "bc0f7f33ff24"}, {0x7, 0x8, "1a8a1a95fd95"}, {0x5, 0x5, "5f2b14"}, {0x6, 0x9, "9fb2444d49a8c8"}, {0x5, 0x4, 'vj'}, {0x0, 0x11, "ef317e1b51c42fd078973d5aabf3a2"}]}, @end, @ssrr={0x89, 0x1b, 0x7c, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @broadcast]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0x9, [@remote]}]}}, {{0x4e21, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x5, 0x0, 0x2, {[@sack={0x5, 0xe, [0x5, 0x0, 0x9]}, @sack={0x5, 0x6, [0x310]}, @mptcp=@ack={0x1e, 0x7, 0x55, 0x4, "9c5374"}, @timestamp={0x8, 0xa, 0x100, 0x41ee}, @nop, @mss={0x2, 0x4, 0x5}, @mss={0x2, 0x4, 0xffe5}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0xe0000000, 0x9}, @mss={0x2, 0x4, 0xf}]}}, {"9731ddd0cd5776349339a6df86c37ee17d53e29e4ccb0379bbe8fa29550abc0389c9c0a0e7d067f640bbeffc4661019f5309edbd5b0dcb2c4d8a7aa797e3ee6141ef4b39d535d83e49e356f5b9ba4830e8c28c446af7b628b9fa5a0285ab540359d7c861b588c5b1085e926ecf2955bd1847c12ff2925d0960a091f6478cab41a18ddc40b8c96572c17a5eadf983f54b8b67b91b8fd8da46488d6d7c0939830ff0c97743e733116e34db5688f12ff5686e231ecd45b7d967e20439ade8cefdeca8add09fde7b"}}}}}}}, 0x0) madvise(&(0x7f0000208000/0x4000)=nil, 0x4000, 0x13) sync_file_range(0xffffffffffffffff, 0xd82, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) executing program 1: socket$igmp(0x2, 0x3, 0x2) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = io_uring_setup(0x1f2a, &(0x7f0000000000)={0x0, 0x693e, 0x80, 0x3, 0x150}) syz_io_uring_setup(0x7934, &(0x7f0000000200)={0x0, 0x0, 0x200, 0x0, 0x0, 0x0, r1}, 0x0, 0x0) syz_io_uring_setup(0xa91, &(0x7f00000002c0), 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) pselect6(0x40, &(0x7f00000001c0)={0x2fe}, 0x0, 0x0, 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfe0f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xa54, 0x18}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0xba01}, 0x21) executing program 4: keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x4, 0x0) set_mempolicy_home_node(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x6, 0x0) capset(&(0x7f0000000080)={0x20080522, r3}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYBLOB="00042dbd7000fedbdf251400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000f82c000000050029000c000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x501000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000100)) executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791090000000000061000000000000009500000000000000a45c8b106d45385a1964b904e462de529745a4cd61a7a0d25ddfd38b8b9a36c14ae1ee5ae29051b28b53a4182deb5ae03bc2644f3f168925abb901765f30c1d039e73af80f39ba982e44fe40c17211db9c82e6da61712f41775115599d65c29cfcd0bffd10d2c62aebfbf41dd375c71938ddfaa1df3117a99ecbddbfee7f7abeba22c29a9cb001001079a87ed58d2cbaf30b8fc3b5fd11e6ca750a6dc5dba2cd1d9fed1fb63bafef7d7bdd5bad81e40379623de9000000000054395605e46e00ded1acb26f8fa9c2702a8aac94fcbbdd2fbbba184bc337d5cb0c04a788fd76b402d5229125c274b171290fdfb32d00504a2a4f797a0103b19a04911e2ab1f208858be1873ee684e45ce2dd5de070f1aabdaa2de7edcbd27f403caffe57995b4e2d914a3c5b9bcf7ba242d1ed391d564b18b3de9c1db2b9232c5e"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c}, 0x48) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x184000, 0x0) munlock(&(0x7f0000438000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f000020f000/0x4000)=nil) munlock(&(0x7f0000a6a000/0x4000)=nil, 0x4000) sysinfo(&(0x7f0000000300)=""/57) mremap(&(0x7f000087f000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', r1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000010000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400126a"], 0x34}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x9, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000100)=""/223, 0x26, 0xdf, 0x1}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r5, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=@deltclass={0x78, 0x29, 0x100, 0x0, 0x0, {}, [@tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6}, @TCA_RATE={0x6}, @TCA_RATE={0x6}]}, 0x78}}, 0x4000045) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x80105014, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) executing program 2: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x8, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)={0x98, 0x0, 0x0, 0x0, 0x0, "", [@generic="54b3adb676a0efce7dcd0955efc42714b8ee7f16091c732c527071c1", @nested={0x4d, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}, @generic="69542ae0bb48405ce3ef9c7220ce3ba85b10bb1bd701c92bc5181c5d3e5327f23ff5640667", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}]}, @typed={0x7, 0x0, 0x0, 0x0, @str='#! '}, @nested={0x14, 0x0, 0x0, 0x1, [@generic, @typed={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x98}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x700, 0x8, 0x1, 0x9, {{0x1a, 0x4, 0x1, 0x7, 0x68, 0x67, 0x0, 0x0, 0x2f, 0x0, @multicast2, @dev, {[@timestamp_addr={0x44, 0x34, 0xe9, 0x1, 0x0, [{@empty, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@local, 0x2}, {@broadcast, 0x2}, {@private=0xa010101, 0x10}, {@private=0xa010101, 0x8}]}, @timestamp_addr={0x44, 0x14, 0xe2, 0x1, 0x0, [{@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @end]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r2, r1, 0xf, 0x1, 0x5}, 0x48) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000140)=""/231) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x28011, r1, 0x0) r3 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000340)={0x0, @local, @local}, &(0x7f0000000080)=0xfffffffffffffef5) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000380)={'gretap0\x00', &(0x7f00000004c0)={'syztnl0\x00', r2, 0x7800, 0x9afb7a8cfeab7878, 0x5, 0x4, {{0x44, 0x4, 0x0, 0x9, 0x110, 0x67, 0x0, 0x2, 0x2f, 0x0, @remote, @empty, {[@timestamp_addr={0x44, 0x24, 0x1d, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@multicast2, 0x3}, {@multicast2, 0x6}, {@broadcast, 0x8}]}, @cipso={0x86, 0x12, 0x3, [{0x7, 0xc, "fb25e0044ce9f320c843"}]}, @cipso={0x86, 0x50, 0x3, [{0x7, 0x7, "771c152c87"}, {0x6, 0xf, "761729277b96559258ba889d2e"}, {0x6, 0xd, "d078eb6ca7bd1e20b9328f"}, {0x7, 0xd, "d80b138f69e212e09c3512"}, {0x5, 0xb, "f3bab07420c769c762"}, {0x6, 0xf, "eb20fdfc508a81417bbe35445f"}]}, @timestamp_addr={0x44, 0x34, 0xbb, 0x1, 0x7, [{@multicast2, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf}, {@remote, 0x5}, {@broadcast, 0x8}, {@multicast1}, {@remote, 0x1}]}, @timestamp_prespec={0x44, 0x1c, 0xf8, 0x3, 0xf, [{@empty, 0x7}, {@multicast2, 0x8}, {@empty, 0x1}]}, @ssrr={0x89, 0x23, 0x6a, [@dev={0xac, 0x14, 0x14, 0x1e}, @dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010101, @local, @dev={0xac, 0x14, 0x14, 0x37}, @remote, @rand_addr=0x64010101, @multicast2]}]}}}}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) shmctl$IPC_RMID(0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0xa2, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000880)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) executing program 3: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xa0, 0x11, 0x148, 0xa0, 0x0, 0x178, 0x2a8, 0x2a8, 0x178, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) syz_io_uring_setup(0x2cd7, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r0, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000002100010000000000000000000a0014000000000000000000"], 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$kcm(0x2, 0x0, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000002200)={@val={0xc}, @val={0x1}, @mpls={[], @ipv4=@generic={{0x5, 0x4, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @dev}, "ec"}}}, 0x23) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000080)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'gre0\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xaf}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x64, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = syz_open_dev$amidi(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r5, 0x80045700, &(0x7f00000001c0)) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x101301) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, r2, 0x0) syz_usb_connect(0xc, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0xed, 0x7f, 0x3f, 0x8, 0x6a9, 0xe, 0xe31e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x74, 0x0, 0x0, 0xea, 0xaa, 0x29}}]}}]}}, 0x0) executing program 4: pipe(0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @loopback}}, 0x31) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x15e10}], 0x1, 0x0, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000080)=0x0) socket$inet6_sctp(0xa, 0x1, 0x84) wait4(r6, &(0x7f00000000c0), 0x40000000, 0x0) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$nl_route_sched_retired(r2, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f0000001680)=@deltfilter={0xe4, 0x2d, 0x0, 0x0, 0x0, {}, [@f_tcindex={{0xc}, {0xb4, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x4}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x1, 0xc}}, @TCA_TCINDEX_ACT={0x88, 0x7, [@m_ct={0x84, 0x15, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}]}, {0x51, 0x6, "0e7c27384572b4e6acc7fbcf2ff4853f9c9a9be2037ecf934cb2f8cddb288672ae0a1f342844c89dfdeabbb31af897cf5dae25aaa9b377467286a5797be3e0d1638658c839414c691eb3c11670"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x85f0}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x3}]}}]}, 0xe4}}, 0x0) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1, 0x0, 0xb}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1={0x2, 0x0}, 0x0, 0x0, 0x1, 0x3}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') writev(r7, &(0x7f0000000680)=[{&(0x7f00000000c0)="00612f39bd4bc08ba54cd846fd225b7008e1871afdb500c5d3d33d9d9837fbc6f5c6955891ea91a2be1381f584c75e7d2e2115936b8722a0f813ef56d8351b91be2ff39eade5395c645d6892be355cd0c98c3d934c98044a3e518d04beeb3b9cdaa0da5eed0c40c13cd4233882ff46103acfb16592f745809e43e37e1d74de9dad3d3e91fa7345e13a2148f8876c9155af1d5e4c99ecc47e38a8c648d6cc035bdef4d57f2717", 0xa6}, {&(0x7f0000000000)="34d2719429ae206c0b036aab21d6f25a874db2683740925826372947875a191b60e583316aa3f2b731e6be1124d36c3bf363ca38108fc204f2115f5c888ed8b9ad4d7d3d9d0ae3161ebf902129424a4961b0d1650551e052bce7f7586fec952ca814b6b86560a1969da4de0a7e6f891a81672d1c88c983f18b", 0x79}, {&(0x7f0000000180)="a23f66d54d6171fc1ae66b0caedb92ee4a117bb0d0c775b919ed4ea7420dc0c3ca046740a1fc2ce22dad211ea06ba6e8b51cad7808057c10bf7dbd9fe1ae2c44e3b9903c72a595ff70b6519a9ce5576095f7994b461e3e77f7297cb9772896c59bc7484278dc738518504472203ecbd73a92ebed3016e272bfea7951340cad3c14b76d2dc1a317fcd1db51c3bf04e0a65641b1eb28037cf6ae644395547b4c4761f2d766882cb3aff538a3bd598aef17defba142222e9da1404d3f7765eb5425d3073123168d30bc23190169eed70b9e937c9f5b5990db611d4c1097ba39c79caa13c4dbe4ac74d3", 0xe8}, {&(0x7f0000000380)="f321a2b7d00fbf59a12ffa37b3984aca59f1ee61a388f283411fe9c14fed6c24dd3bf149cb811fce82124f005991a9e2ea174a2dcbc2955dde31569d191f6b04ec1d97b46cc578f469c8c6bf01b5d3ae834dda29f2a840c2f9504f039f6c30869f27fbabe144a88c6379103ecdfb37ab1730f47642f138b5adcc3ba205d675579ece0a931de73cc05c32ceb5a8a0a90e7465bfebb01196f74855c2d518ce8fb3058ec75845405ff6bebbc66202386db6f19e1ef2ece6187d860f60857c3dbe9e1246b90e448de2901b4a0649288d93e5e0", 0xd1}, {&(0x7f0000000280)="635dbf35c28b1ab5093396fd5dd6b18540e95140dae95e63fdc07ff7f53e6dfe235f79f6d32dca2505103db91b9a24e5e9729d6e4b299715ac14fcdcf72b4aea3f2a28dbb987b22ca2568b02fb3fb0008677f42e76a5e922d1dfaf7016ef9b4ed25959d97ccf908c9e6474c000aaa76b560e0ddfbe8f03bca36bffbdc0d415f024595ba5", 0x84}, {&(0x7f0000000500)="7f2462566a4b272ce5a762325b43607e6b8c68ef2111d450e44d20aa7ed9c5ea0c58b366435af3c2e3c1536de8867442f5bcf2241d9aab8fcd5d214f7c61595eb1e356c2c7afe00ca7a1cdbe0fff4ed1d295958c2f94b3ba0c3cfed19c686451c5d2b88a0852d7f57e88e38063c4a44dd87da6ba78153add7eaa0cd62508f8", 0x7f}, {&(0x7f0000000580)="78d105061fc7c3bff548ac65d96d8d74f3ace7316983ed9af7567f017d015b34d81243b7f91f13556411651ed7aac1d36953d30d97e76c47db4a04f677dc460be4b7b936821a62c83acb6bfee824546cef960367e693d5d38da9174404d5a646ea", 0x61}, {&(0x7f0000000600)="eefa39e14ef9b5320cabf1a9ea740c7b3a7144166ad2e8c36b03d625273cf3df638ce5ffe4b2fcd597b532186e2caf5c3989cf6d9ae5747a2d22ce58f88ccc5d031d1b656cee2d9129c5439d0296515aa4208da556b04c1add125b1427f611", 0x5f}], 0x8) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='ext4_es_find_extent_range_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f00000003c0)={0x0, 0x80000001, @start={0x0, 0x0, "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", "2a3dc03685cb34c9493c8b74f974845f8e8167fb8ff92f6d1d6c837a1066668a456af9f5d598224cc61b1c9f0a1cbbcd84832be57a178e82a57630265f8b35b8977ae9d2a59caa7601feeed839471a23d287b8333d12b873191f3e8687c53a999478e9ba99793ca081ac0d59eccc0461e186ef93779fbe733822b22b39121130fd3241d13ae92f89cbcbf92542bdd0e719520d02147be966b74b4d066c785a2602c706e69fc55f65ba5693dbdeed8d93cbb2164d7ab05af9c175d97095a9b6835f343bba3ecd872ebbfdaa152b6d8ba2c7c0809d5fcf1067baef44f60ed0aa812d6cce696d9893565ad3491da70ee809113559cafdb21885a95fa2afe2b4e2c5cfbe54ff6db8aca95e5b5df346e77ac36779234bfd4f417e3c5c3adaa1bcb4e95521114a78c9c5e836d9804a69e27307da1a5da3f7a9ca1074067581c4f2752c96609a47b0535f90b6ee5e15f1426c78ac38822a17730c449a814fc698b118df7d94789d7bbdb2f93f1988be3d036ac676b6d030d4495cb148af7c5021a58d68bd0fb0b40e44d9b6af50d0046754709002ad0e206970aef398d1fd6ea31fe596c1a8630ec20e2b26fe6e37f3ed056bfba867020a6f4139ac855757207b14ee78e4df7e030d5e0b6030f0740a4ce19b6604c49fc168c58c9ba7cd56c72defff8c131e232efb3cacf5c29eb41e414ac7b40e2c09feabfbd981883522ef619b7d1926e8f938b56905f6632e149002310023f67f6d1a5057f347b0c8755ba6603e7d3a4205eb63afd191c7e36a169449c353481ccde9966aaf7104515aeff853044196838de8045cd1179793b311aac97d27f8e4ac1f3d5649f7bc5d64876f7cb997b66c6f07f64c3d558125f5493a1d11a760e48f0897ab2bcf66c2949924a48eb03170aca5c9f79622cc654f866ddd7212ece9f42acc9dc67f2ddf7730909d0d070beb80b3bc13e6aff186a936b5bd42b81e79dca0207b8145463df4bfb9279f007492229c84abe1ba5893b144ec7f75cfffd373f6a3cbd24383e31cad1d5d1198984596daaa974e5866a0f29884fed619df202037a9e5a264400fa420969c71c97b1513a9c30a6194d81b1000dcee2f49cb3c3673e91062c66c3d9eaa3ab9b45f583239ace7d786ae445adea0c93203063ebae064ba74178c810cd978e63ecaf1c016853b8129c109444e6e02fde15c1676f04d8b9b1de27b77394296c58c8e4de64ce41ad8e900a7531951ab6fea402110d9b86c5637ca79b2bb009705ee0766c8712e08d15c9362a8e60dfe7c97ac69ca8e13a34e93080a2942e61478e30908728631a57e2c2e7d6d8bf46973fd16b9408e169727c9588130404d42e8ce9cbf4c9617585ed275c15fcffb32c324ed15b644c3f7e6e05c2a6ad4e4d3e97ae733deb088823a7c82819454e784028dee1446a766ff4a588be72a630f96b7699597c1"}, [0x4d8, 0x100000001, 0xfff, 0x2, 0x4, 0xcda, 0xf3a, 0x201, 0x4, 0x6fa6, 0x24, 0x20, 0x1, 0x8000000000000000, 0x2, 0x4, 0x3, 0x9, 0x7fff, 0xa41, 0x0, 0x287d, 0x1, 0x2, 0x0, 0x9, 0x7, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5acc, 0x6, 0x2, 0x2, 0x80000001, 0x8, 0x20000000200, 0x5, 0x8, 0x2, 0x3b, 0x0, 0x0, 0x71, 0x5a, 0x4, 0x8, 0x4, 0x8, 0x2, 0xe93, 0x21, 0x5, 0x2, 0x3, 0x0, 0x1, 0xffffffffffffff4b, 0x2, 0x7, 0x1c00000000000000, 0x7]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="010d856aea454c8a48f680c20000ffaaaaaaaaaa03080045000028000000000002907800000000ffffffff11e0907800000000000100"], 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="64000000170a05000000000000000000000000000900020073797a31000002000c00054000000000000000030c000540000000000000000304000400000007400000000014000380080001400000000008000240000001010900010073"], 0x64}}, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@empty}, {@in6=@empty, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x4000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7}}]}, 0x154}}, 0x20004044) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1}, 0xc) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f00000000c0), 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001840)=@newtfilter={0x928, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x8fc, 0x2, [@TCA_U32_SEL={0x624, 0x5, {0x3, 0x18, 0x0, 0x4f, 0x3, 0xff, 0x1000, 0x7, [{0x5, 0x0, 0x1ff, 0x400}, {0x0, 0x7, 0x5, 0x3f}, {0x5, 0x6, 0x1, 0xff}, {0x8001, 0x1f, 0x128c45f3, 0x8}, {0xdbc, 0x4, 0x2, 0xffffff34}, {0x3, 0x80000000, 0x7e25be85, 0x9}, {0xfff, 0x101, 0x0, 0x100}, {0x2, 0x5, 0x2, 0x5}, {0x6, 0x4, 0x0, 0xa0}, {0x3f, 0x1, 0x10001, 0x20}, {0x1, 0xd1, 0x400, 0x80000000}, {0x3, 0x7fff, 0x8, 0x9}, {0x6, 0x2, 0x40, 0x7}, {0x3, 0x8c, 0x81}, {0x10001, 0x2, 0x3, 0x9}, {0x3c, 0x1, 0x2, 0x8}, {0x1, 0x0, 0x4, 0xcca6}, {0x2, 0xfff, 0x8}, {0x6, 0x9a5, 0x2, 0xce0}, {0x0, 0x7fff}, {0xac, 0x3ff, 0x3ff, 0xffffffff}, {0x0, 0x4, 0x7ff}, {0x0, 0xd59, 0xb2af}, {0x5, 0x1ff, 0x9, 0x2}, {0x4, 0x0, 0x7fffffff, 0x8}, {0xff, 0x0, 0x40, 0x8001}, {0x400, 0x0, 0x0, 0x1ff}, {0x101, 0x4, 0x8006, 0x9}, {0x0, 0x1ff, 0xfffffff7, 0x8}, {0x0, 0x7, 0x4, 0x1}, {0x7, 0x1, 0x401, 0x7}, {0x3, 0x0, 0x104, 0xea6}, {0x9, 0x8, 0x80000000, 0xc689}, {0x1, 0x2f3, 0x3, 0x9}, {0x3, 0x7f, 0x1, 0x10001}, {0x80000001, 0x10000, 0x8, 0xffff}, {0x8000, 0x7, 0x3, 0x3}, {0x0, 0x1419, 0x3, 0x631b}, {0x3c, 0x4, 0x7fffffff, 0x7f}, {0x40, 0x53, 0x8, 0x5}, {0x6, 0x9, 0x200, 0x4}, {0x40, 0x64f, 0x9, 0x6}, {0x6, 0xffffffff, 0x0, 0x401}, {0x180000, 0x400, 0x0, 0x7}, {0x5, 0x1000, 0x7, 0x1}, {0x0, 0x0, 0x0, 0x7fffffff}, {0xf0c, 0x8000, 0xf26, 0x36}, {0xa, 0x8003, 0xfffffff7, 0x4}, {0x200, 0x835, 0x5, 0x8}, {0x0, 0x7}, {0xff, 0x400, 0x7, 0x2}, {0x8001, 0x2, 0x5, 0xfff}, {0x4, 0x1, 0x180, 0x6}, {0x6, 0x4, 0x63, 0x8}, {0x7fff, 0x1, 0x9, 0x5}, {0x2, 0x3, 0x57, 0x5}, {0x401, 0x1, 0x0, 0x7}, {0x2, 0x29ea, 0x2, 0x6}, {0x4, 0x8a4, 0x5, 0x2}, {0x101, 0x1, 0xff, 0x7}, {0xffff4130, 0xa50, 0x4, 0x7}, {0x5, 0x28, 0x3ff, 0x37c0}, {0xff, 0x4, 0x0, 0x2}, {0x0, 0x10001, 0x0, 0xfffffa2a}, {0x9, 0x20, 0xbf1, 0x9}, {0xff, 0x5bb, 0x42, 0x6}, {0x4, 0x6, 0x9, 0x1700000}, {0x10000, 0x1, 0x0, 0x8000}, {0x1f, 0x84a8, 0x101, 0x7}, {0x6, 0x8c, 0x5e32, 0x6}, {0xfffffffe, 0x401, 0xa99b, 0xff}, {0x1, 0x101, 0x8, 0x5}, {0x1, 0x3, 0x0, 0x3f}, {0x7, 0x9, 0xffff, 0x4}, {0x0, 0x80000001, 0x1, 0x4d}, {0x80, 0x8, 0x8, 0x200}, {0xcdf, 0x3, 0xfffffff7, 0x9b5a}, {0x5, 0x0, 0xb0, 0x8}, {0xfffffffc, 0x100, 0x2, 0x20}, {0x1, 0x4, 0x0, 0x7}, {0x6, 0xfffffff8, 0x4, 0x2}, {0x100, 0xe530, 0x2, 0x40}, {0x9, 0x80, 0x0, 0x7f}, {0x62, 0xc4000000, 0x7, 0x4}, {0xfff, 0xfffffffc, 0x1, 0x101}, {0x0, 0x7, 0xfffffbff, 0xd72e}, {0x6f, 0x9, 0xfffffffd, 0x7fff}, {0x0, 0x10001, 0x3}, {0x2, 0x10001, 0x4, 0x3}, {0x5, 0xa4e, 0x400, 0x81}, {0x66e, 0x80000000, 0x7, 0x1}, {0x8, 0x81, 0x80000000}, {0x5, 0xdf5d, 0x430, 0x8}, {0x50, 0x7, 0x81, 0x9}, {0x0, 0x8e, 0x1, 0xf}, {0x6, 0x9, 0x3, 0x6}, {0x8e, 0xc, 0x2, 0x6}]}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x1}, @TCA_U32_LINK={0x8, 0x3, 0xc52}, @TCA_U32_HASH={0x8, 0x2, 0x7}, @TCA_U32_ACT={0x2a8, 0x7, [@m_vlan={0xe4, 0x0, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3ff, 0x7, 0x10000000, 0x72}}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa95}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xeff}]}, {0x72, 0x6, "1b61b720e1ca1644a1e6002380cc72927d91efa590298168e9f9a7f667e099e1151c0705c2f05205f328346e708c498266affafb1b00fe585e3a2de8311e409087d94550ca1172451bd2a48c13320166ccf83c8163830bc16daaf995762bdbc632e600876b8f77e7db73d8c85908"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x1c0, 0x0, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xc50, 0x0, 0x6, 0x8}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x800, 0x2, 0x73, 0x5}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0xff, 0x3, 0xb, 0xf7}, 0x71}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffdd, 0x42d, 0x20000000, 0xb77e, 0x40}, 0x53}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x20000000, 0x7, 0x5}, 0x19}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7b, 0x1ff, 0x8, 0x8, 0x7fff}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x8, 0x4, 0x9a5}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x9e, 0x10000000, 0x1, 0xfffffab8}, 0xc}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7fff, 0x4, 0xff, 0x5}, 0x71}}]}, {0x96, 0x6, "ab8f059a226ae84317d0bddb27c2d19f87bba9babeb2fb153fc50fe781f5fb17d40267d4f679acb1709ff9c8ea94041e24badd2e2920e1638076d2c37768421cf0197ef454792b2b4c3a5ddfba6462e454a96a1f577ab67a92a65a69760ca47f22fa1c00ca3e95cb58fb7f6bcf4dcc14f781dcee7fffdebf10a28d6068e6e2d32e812be5ed0ce4cc8f6db382ab090d30f5ad"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_U32_INDEV={0x14, 0x8, 'vlan1\x00'}]}}]}, 0x928}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000003f40)=@raw={'raw\x00', 0x4001, 0x3, 0x208, 0x0, 0x0, 0x148, 0x0, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @loopback, 0x0, 0x0, 'ip6gretap0\x00', 'bridge0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ip={@local, @loopback, 0x0, 0x0, 'wlan0\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = open(&(0x7f0000000080)='./file0\x00', 0x189040, 0x189) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000fc0)=ANY=[@ANYRES8=r3, @ANYRESDEC=r2, @ANYRESOCT, @ANYRESHEX=r2, @ANYBLOB="eb15761f1b28b725188bab893ddd63a00fe271d5a54fbeed6226a8ade6b6a08794729d188544dbb2279713f0778dc5142d929db63071e80e3b3423894f3e3f92e807158eff5ba05f"], 0x14}}, 0x0) r7 = dup3(r4, r1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_io_uring_setup(0x18a, &(0x7f0000000580), &(0x7f00006d5000), &(0x7f0000216000)) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r8}, 0x4) recvmmsg(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000200)=""/108, 0x6c}, {&(0x7f0000000740)=""/208, 0xd0}, {&(0x7f0000000840)=""/200, 0xc8}, {&(0x7f0000000280)=""/65, 0x41}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f00000003c0)=""/63, 0x3f}, {&(0x7f0000000940)=""/233, 0xe9}, {&(0x7f0000000a40)=""/131, 0x83}, {&(0x7f0000000b00)=""/124, 0x7c}, {&(0x7f0000000b80)=""/192, 0xc0}], 0xa, &(0x7f0000000d00)=""/114, 0x72}, 0x81}], 0x1, 0x10142, &(0x7f0000000d80)={0x0, 0x989680}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x10, &(0x7f0000001080)=ANY=[@ANYBLOB="12cf77411731164cfbdb963efece829df6765815097ecdeb9b8bc626b2f191a538750a2ddd7e215dce0c264ca6edd97e16350a18838ea2b9477d2e328ee0ac8a50fb99c274be1c5fa64ae6e0270c532b16fcd05eafa589348fb876a80735d88032949fe7ae33f04868da60ff18c1d3d55435affdbdc97cd6609527f8fb1d14cea2157e973696c40694b40dd53b3fe03969d0d3c2aa119f78ffe854f384e2357b2e75c19c81968220820eff691c28c75a875c828e39f31fa60da5912dbe3ce9dff05d2d4e58f589f2fbb5cb9b40f3462b9ada9ecc83eac6ddb47ff20f5e4102e7962d02e0a567730b6636be541d2785", @ANYRES16=r6], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x9, &(0x7f0000002840), 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r9, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r7, 0x40047211, &(0x7f00000000c0)=0x4) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030b0000000000000000000000010009000000200003000600000000000200000000000000000000000000000002000100f4f7ffffffff050b00000000030005000000000002"], 0x58}, 0x1, 0x7}, 0x0) executing program 4: pipe(0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x15e10}], 0x1, 0x0, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x8}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffb}, @TCA_NETEM_RATE64={0xc, 0x8, 0x654534bf5327d02e}, @TCA_NETEM_RATE={0x14}]}}}]}, 0x78}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) fchdir(0xffffffffffffffff) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r4, &(0x7f0000000100)="0503460008003e00000002008100", 0x36, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000400)=""/25, 0x19}, {0x0}, {&(0x7f0000000440)=""/143, 0x8f}, {&(0x7f0000000980)=""/4096, 0x1000}], &(0x7f0000000700), 0x6}, 0x20) r7 = socket$kcm(0x10, 0x2, 0x4) close(r7) socket$kcm(0x10, 0x2, 0x0) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000040)={0x1d, r9, 0x3}, 0x18) sendmmsg(r8, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000100)="e8", 0x1}], 0x2}}], 0x1, 0x0) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x0, 0x4000) r10 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7f, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x1, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3314c94970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) ioctl$vim2m_VIDIOC_STREAMON(r10, 0x40045612, &(0x7f0000000000)=0x1) executing program 2: pipe(0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @loopback}}, 0x31) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x15e10}], 0x1, 0x0, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000080)=0x0) socket$inet6_sctp(0xa, 0x1, 0x84) wait4(r6, &(0x7f00000000c0), 0x40000000, 0x0) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$nl_route_sched_retired(r2, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f0000001680)=@deltfilter={0xe4, 0x2d, 0x0, 0x0, 0x0, {}, [@f_tcindex={{0xc}, {0xb4, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x4}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x1, 0xc}}, @TCA_TCINDEX_ACT={0x88, 0x7, [@m_ct={0x84, 0x15, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}]}, {0x51, 0x6, "0e7c27384572b4e6acc7fbcf2ff4853f9c9a9be2037ecf934cb2f8cddb288672ae0a1f342844c89dfdeabbb31af897cf5dae25aaa9b377467286a5797be3e0d1638658c839414c691eb3c11670"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x85f0}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x3}]}}]}, 0xe4}}, 0x0) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1, 0x0, 0xb}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1={0x2, 0x0}, 0x0, 0x0, 0x1, 0x3}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') writev(r7, &(0x7f0000000680)=[{&(0x7f00000000c0)="00612f39bd4bc08ba54cd846fd225b7008e1871afdb500c5d3d33d9d9837fbc6f5c6955891ea91a2be1381f584c75e7d2e2115936b8722a0f813ef56d8351b91be2ff39eade5395c645d6892be355cd0c98c3d934c98044a3e518d04beeb3b9cdaa0da5eed0c40c13cd4233882ff46103acfb16592f745809e43e37e1d74de9dad3d3e91fa7345e13a2148f8876c9155af1d5e4c99ecc47e38a8c648d6cc035bdef4d57f2717", 0xa6}, {&(0x7f0000000000)="34d2719429ae206c0b036aab21d6f25a874db2683740925826372947875a191b60e583316aa3f2b731e6be1124d36c3bf363ca38108fc204f2115f5c888ed8b9ad4d7d3d9d0ae3161ebf902129424a4961b0d1650551e052bce7f7586fec952ca814b6b86560a1969da4de0a7e6f891a81672d1c88c983f18b", 0x79}, {&(0x7f0000000180)="a23f66d54d6171fc1ae66b0caedb92ee4a117bb0d0c775b919ed4ea7420dc0c3ca046740a1fc2ce22dad211ea06ba6e8b51cad7808057c10bf7dbd9fe1ae2c44e3b9903c72a595ff70b6519a9ce5576095f7994b461e3e77f7297cb9772896c59bc7484278dc738518504472203ecbd73a92ebed3016e272bfea7951340cad3c14b76d2dc1a317fcd1db51c3bf04e0a65641b1eb28037cf6ae644395547b4c4761f2d766882cb3aff538a3bd598aef17defba142222e9da1404d3f7765eb5425d3073123168d30bc23190169eed70b9e937c9f5b5990db611d4c1097ba39c79caa13c4dbe4ac74d3", 0xe8}, {&(0x7f0000000380)="f321a2b7d00fbf59a12ffa37b3984aca59f1ee61a388f283411fe9c14fed6c24dd3bf149cb811fce82124f005991a9e2ea174a2dcbc2955dde31569d191f6b04ec1d97b46cc578f469c8c6bf01b5d3ae834dda29f2a840c2f9504f039f6c30869f27fbabe144a88c6379103ecdfb37ab1730f47642f138b5adcc3ba205d675579ece0a931de73cc05c32ceb5a8a0a90e7465bfebb01196f74855c2d518ce8fb3058ec75845405ff6bebbc66202386db6f19e1ef2ece6187d860f60857c3dbe9e1246b90e448de2901b4a0649288d93e5e0", 0xd1}, {&(0x7f0000000280)="635dbf35c28b1ab5093396fd5dd6b18540e95140dae95e63fdc07ff7f53e6dfe235f79f6d32dca2505103db91b9a24e5e9729d6e4b299715ac14fcdcf72b4aea3f2a28dbb987b22ca2568b02fb3fb0008677f42e76a5e922d1dfaf7016ef9b4ed25959d97ccf908c9e6474c000aaa76b560e0ddfbe8f03bca36bffbdc0d415f024595ba5", 0x84}, {&(0x7f0000000500)="7f2462566a4b272ce5a762325b43607e6b8c68ef2111d450e44d20aa7ed9c5ea0c58b366435af3c2e3c1536de8867442f5bcf2241d9aab8fcd5d214f7c61595eb1e356c2c7afe00ca7a1cdbe0fff4ed1d295958c2f94b3ba0c3cfed19c686451c5d2b88a0852d7f57e88e38063c4a44dd87da6ba78153add7eaa0cd62508f8", 0x7f}, {&(0x7f0000000580)="78d105061fc7c3bff548ac65d96d8d74f3ace7316983ed9af7567f017d015b34d81243b7f91f13556411651ed7aac1d36953d30d97e76c47db4a04f677dc460be4b7b936821a62c83acb6bfee824546cef960367e693d5d38da9174404d5a646ea", 0x61}, {&(0x7f0000000600)="eefa39e14ef9b5320cabf1a9ea740c7b3a7144166ad2e8c36b03d625273cf3df638ce5ffe4b2fcd597b532186e2caf5c3989cf6d9ae5747a2d22ce58f88ccc5d031d1b656cee2d9129c5439d0296515aa4208da556b04c1add125b1427f611", 0x5f}], 0x8) executing program 3: keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x4, 0x0) set_mempolicy_home_node(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x6, 0x0) capset(&(0x7f0000000080)={0x20080522, r3}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYBLOB="00042dbd7000fedbdf251400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000f82c000000050029000c000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x501000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000100)) executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xa7, 0xa3, 0xb1, 0x20, 0x9fb, 0xebbe, 0xeafe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7a, 0x25, 0xe0, 0x0, [], [{{0x9, 0x5, 0x0, 0x3}}]}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) executing program 3: ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)={0x73, 0x0, 0xfc, 0x0, 0xffffffff, 0xa, 0x7f, 0x7, 0x0, 0x0, 0xc, 0x7, 0x0, 0x5, 0x4, 0xba, 0x0, 0x4, 0x1, '\x00', 0x0, 0x9}) socket$caif_stream(0x25, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r3, 0x0, r2) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000080)) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x0, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) openat$cgroup_ro(r0, &(0x7f0000000200)='pids.current\x00', 0x275a, 0x0) memfd_create(&(0x7f00000006c0)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\a\x00;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\xb7/\xa5\xa7\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e1\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84,\xd3\x06\xaeO \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x00\x04\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2Cw\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93\x00\x00', 0xd) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_usb_connect(0x1, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a86200000904000002ca744d07090503020000ff99090805848f"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1401}}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000380)) syz_open_dev$char_usb(0xc, 0xb4, 0xc936) syz_usb_disconnect(r5) r6 = socket$can_raw(0x1d, 0x3, 0x1) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) setsockopt(r6, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000040)=0xfffffeb5, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=@deltclass={0x78, 0x29, 0x100, 0x0, 0x0, {}, [@tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6}, @TCA_RATE={0x6}, @TCA_RATE={0x6}]}, 0x78}}, 0x4000045) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x80105014, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) program did not crash replaying the whole log did not cause a kernel crash single: executing 5 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$nl_route_sched-socket-sendto-openat$audio-ioctl$SNDCTL_DSP_SETTRIGGER-socket$inet_udp-setsockopt$SO_TIMESTAMPING-connect$inet-sendmmsg-setsockopt$inet_int-setsockopt$inet_int-recvmmsg detailed listing: executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=@deltclass={0x78, 0x29, 0x100, 0x0, 0x0, {}, [@tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6}, @TCA_RATE={0x6}, @TCA_RATE={0x6}]}, 0x78}}, 0x4000045) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x80105014, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_SET_VCPU_EVENTS-socket$caif_stream-prctl$PR_SCHED_CORE-openat-sched_setaffinity-openat$hwrng-openat$ttyS3-openat$mixer-fcntl$dupfd-ioctl$SOUND_MIXER_READ_STEREODEVS-preadv-socket$igmp6-setsockopt$IP6T_SO_SET_REPLACE-setsockopt$IP6T_SO_SET_REPLACE-openat$cgroup_ro-memfd_create-socket$nl_route-syz_usb_connect-getsockopt$sock_cred-syz_open_dev$char_usb-syz_usb_disconnect-socket$can_raw-madvise-setsockopt-setsockopt$CAN_RAW_ERR_FILTER-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_raw-prctl$PR_SET_SYSCALL_USER_DISPATCH_ON detailed listing: executing program 0: ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)={0x73, 0x0, 0xfc, 0x0, 0xffffffff, 0xa, 0x7f, 0x7, 0x0, 0x0, 0xc, 0x7, 0x0, 0x5, 0x4, 0xba, 0x0, 0x4, 0x1, '\x00', 0x0, 0x9}) socket$caif_stream(0x25, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r3, 0x0, r2) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000080)) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x0, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) openat$cgroup_ro(r0, &(0x7f0000000200)='pids.current\x00', 0x275a, 0x0) memfd_create(&(0x7f00000006c0)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\a\x00;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\xb7/\xa5\xa7\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e1\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84,\xd3\x06\xaeO \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x00\x04\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2Cw\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93\x00\x00', 0xd) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_usb_connect(0x1, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a86200000904000002ca744d07090503020000ff99090805848f"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1401}}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000380)) syz_open_dev$char_usb(0xc, 0xb4, 0xc936) syz_usb_disconnect(r5) r6 = socket$can_raw(0x1d, 0x3, 0x1) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) setsockopt(r6, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000040)=0xfffffeb5, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_genetlink_get_family_id$mptcp detailed listing: executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xa7, 0xa3, 0xb1, 0x20, 0x9fb, 0xebbe, 0xeafe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7a, 0x25, 0xe0, 0x0, [], [{{0x9, 0x5, 0x0, 0x3}}]}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) program crashed: possible deadlock in __flush_workqueue single: successfully extracted reproducer found reproducer with 2 syscalls minimizing guilty program testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xa7, 0xa3, 0xb1, 0x20, 0x9fb, 0xebbe, 0xeafe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7a, 0x25, 0xe0, 0x0, [], [{{0x9, 0x5, 0x0, 0x3}}]}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) program crashed: possible deadlock in __flush_workqueue testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xa7, 0xa3, 0xb1, 0x20, 0x9fb, 0xebbe, 0xeafe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7a, 0x25, 0xe0, 0x0, [], [{{0x9, 0x5, 0x0, 0x3}}]}}]}}]}}, 0x0) program crashed: possible deadlock in __flush_workqueue extracting C reproducer testing compiled C program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: possible deadlock in __flush_workqueue simplifying C reproducer testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program did not crash testing compiled C program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: possible deadlock in __flush_workqueue testing compiled C program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: possible deadlock in __flush_workqueue testing compiled C program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: possible deadlock in __flush_workqueue testing compiled C program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: possible deadlock in __flush_workqueue testing compiled C program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: possible deadlock in __flush_workqueue testing compiled C program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: possible deadlock in __flush_workqueue testing compiled C program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: possible deadlock in __flush_workqueue reproducing took 1h0m34.374984487s repro crashed as (corrupted=false): ============================================ WARNING: possible recursive locking detected 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0 Not tainted -------------------------------------------- kworker/0:0H/10 is trying to acquire lock: ffff8880247ce148 ((wq_completion)xillyusb){+.+.}-{0:0}, at: touch_wq_lockdep_map kernel/workqueue.c:3876 [inline] ffff8880247ce148 ((wq_completion)xillyusb){+.+.}-{0:0}, at: __flush_workqueue+0x1b0/0x1710 kernel/workqueue.c:3918 but task is already holding lock: ffff8880247ce148 ((wq_completion)xillyusb){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] ffff8880247ce148 ((wq_completion)xillyusb){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock((wq_completion)xillyusb); lock((wq_completion)xillyusb); *** DEADLOCK *** May be due to missing lock nesting notation 2 locks held by kworker/0:0H/10: #0: ffff8880247ce148 ((wq_completion)xillyusb){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff8880247ce148 ((wq_completion)xillyusb){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc900000f7d00 ((work_completion)(&xdev->wakeup_workitem)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc900000f7d00 ((work_completion)(&xdev->wakeup_workitem)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 stack backtrace: CPU: 0 UID: 0 PID: 10 Comm: kworker/0:0H Not tainted 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 Workqueue: xillyusb wakeup_all Call Trace: __dump_stack lib/dump_stack.c:93 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119 check_deadlock kernel/locking/lockdep.c:3061 [inline] validate_chain+0x15d3/0x5900 kernel/locking/lockdep.c:3855 __lock_acquire+0x137a/0x2040 kernel/locking/lockdep.c:5142 lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5759 touch_wq_lockdep_map kernel/workqueue.c:3876 [inline] __flush_workqueue+0x1c9/0x1710 kernel/workqueue.c:3918 drain_workqueue+0xc9/0x3a0 kernel/workqueue.c:4082 destroy_workqueue+0xba/0xc40 kernel/workqueue.c:5781 cleanup_dev drivers/char/xillybus/xillyusb.c:558 [inline] kref_put+0x104/0x180 include/linux/kref.h:65 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312 worker_thread+0x86d/0xd40 kernel/workqueue.c:3390 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 final repro crashed as (corrupted=false): ============================================ WARNING: possible recursive locking detected 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0 Not tainted -------------------------------------------- kworker/0:0H/10 is trying to acquire lock: ffff8880247ce148 ((wq_completion)xillyusb){+.+.}-{0:0}, at: touch_wq_lockdep_map kernel/workqueue.c:3876 [inline] ffff8880247ce148 ((wq_completion)xillyusb){+.+.}-{0:0}, at: __flush_workqueue+0x1b0/0x1710 kernel/workqueue.c:3918 but task is already holding lock: ffff8880247ce148 ((wq_completion)xillyusb){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] ffff8880247ce148 ((wq_completion)xillyusb){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock((wq_completion)xillyusb); lock((wq_completion)xillyusb); *** DEADLOCK *** May be due to missing lock nesting notation 2 locks held by kworker/0:0H/10: #0: ffff8880247ce148 ((wq_completion)xillyusb){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline] #0: ffff8880247ce148 ((wq_completion)xillyusb){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312 #1: ffffc900000f7d00 ((work_completion)(&xdev->wakeup_workitem)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline] #1: ffffc900000f7d00 ((work_completion)(&xdev->wakeup_workitem)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312 stack backtrace: CPU: 0 UID: 0 PID: 10 Comm: kworker/0:0H Not tainted 6.11.0-rc2-syzkaller-00004-gb446a2dae984 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 Workqueue: xillyusb wakeup_all Call Trace: __dump_stack lib/dump_stack.c:93 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119 check_deadlock kernel/locking/lockdep.c:3061 [inline] validate_chain+0x15d3/0x5900 kernel/locking/lockdep.c:3855 __lock_acquire+0x137a/0x2040 kernel/locking/lockdep.c:5142 lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5759 touch_wq_lockdep_map kernel/workqueue.c:3876 [inline] __flush_workqueue+0x1c9/0x1710 kernel/workqueue.c:3918 drain_workqueue+0xc9/0x3a0 kernel/workqueue.c:4082 destroy_workqueue+0xba/0xc40 kernel/workqueue.c:5781 cleanup_dev drivers/char/xillybus/xillyusb.c:558 [inline] kref_put+0x104/0x180 include/linux/kref.h:65 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312 worker_thread+0x86d/0xd40 kernel/workqueue.c:3390 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244