Extracting prog: 8m46.57676982s
Minimizing prog: 1h31m15.839282713s
Simplifying prog options: 0s
Extracting C: 54.21018593s
Simplifying C: 9m13.371433991s


extracting reproducer from 44 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-link-openat$dir-getdents64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
link(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1)
getdents64(r0, &(0x7f00000007c0)=""/85, 0x55)

program did not crash
single: failed to extract reproducer
bisect: bisecting 44 programs with base timeout 30s
testing program (duration=41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30, 24, 19, 26, 30, 30, 15, 28, 30, 15, 26, 15, 15, 29, 4, 29, 30, 10, 30, 25, 28, 16, 15, 28, 27, 27, 28, 17, 5, 22, 17, 25, 29, 28, 28, 29, 3, 29, 10, 30, 28, 6, 19]
detailed listing:
executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = syz_open_dev$video4linux(&(0x7f0000001e00), 0x0, 0x0)
getpid()
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
move_pages(r3, 0x0, 0x0, 0x0, 0x0, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmctl$IPC_STAT(0x0, 0x2, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x88200)
r6 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r6, 0x0, 0x0)
r7 = fsopen(&(0x7f0000000100)='zonefs\x00', 0x1)
r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f0000000500)={0x0, &(0x7f0000000280)})
ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000040)={0x200, 0x0, 0x0, &(0x7f00000003c0)=[0x7], &(0x7f00000000c0)=[0x0], &(0x7f0000000180)=[0x31], 0x0, 0xff})
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getpgid(0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0xe348, 0x11, 0x201a, 0x80001, 0x0, 0x40000, 0x1})
getsockopt$inet_int(r0, 0x0, 0x33, 0x0, &(0x7f0000000080))
executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3ff, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000180)=0x1)
r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2)
connect$unix(r4, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f00000004c0)}}, 0x40)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [""]}, 0x14}}, 0x84)
socket$inet(0x2, 0x2, 0x1)
r8 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'veth0_to_batadv\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2d, 0x4, 0x5, {0xb, @ah_ip6_spec={@ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0xb, 0x3}, {0x0, @empty, 0x9, 0x401, [0x1, 0x1]}, @usr_ip4_spec={@dev={0xac, 0x14, 0x14, 0x1d}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x4, 0x1, 0x94}, {0x0, @local, 0x2, 0x9, [0x100, 0x10]}, 0x102}, 0x2, [0x9000, 0x0]}})
ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x84}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1}, 0x9}], 0x1, 0x2, 0x0)
executing program 2:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x8, &(0x7f0000000040))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/slabinfo\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)
close(r0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000000)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
listen(r4, 0xa)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x452280, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x102001, 0x0)
r6 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0x22, &(0x7f0000000080)=0x5, 0x4)
ioctl$TIOCGPTPEER(r5, 0x5441, 0xb3d)
ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r1, 0x7b3, &(0x7f0000000240))
executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f000905e702100000fa00090582"], 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884)
r2 = socket(0x400000000010, 0x3, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r4, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4c13e67f, 0x5}}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1fa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000740000/0x1000)=nil, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x70, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffd}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x2c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x5, 0x40}}}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="c2fd291f", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x8]}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4040054)
executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0)
sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x84, r6, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1a}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x5}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r7, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
r8 = dup(r7)
write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18)
write$FUSE_INIT(r8, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50)
r9 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r9, &(0x7f0000003800)={0x2020}, 0x2020)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x28, r1, 0x1, 0x70bd28, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80080}, 0x24000000)
executing program 2:
r0 = syz_usb_connect$uac1(0x0, 0x7f, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000000002b406b1d010140000102030109026d0003010070000904000000010100000a24010040000201020904010000010200000904010101010200000905010920000030000725010000000009040200000102000009040201010102000007240100f90300072401210000000905820910000000080725018100000065a7253045e735abb2e673b3517334e08dd149e80f3a4aed05eddbdcbf08424728031957261064c2c19a2764a9e6ed4a6097f8639aac3862d2de4aafe2b436acb2f65c0ac60053d8e1be0236f90a1e315ae609ccf9de0dcdef1a3d79c4"], 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000300)='syzkaller\x00'}, 0x94)
r2 = syz_usb_connect(0x0, 0xb16, &(0x7f0000002200)={{0x12, 0x1, 0x0, 0x38, 0x7b, 0x79, 0xff, 0x19d2, 0xffc0, 0x3112, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb04, 0x4, 0x1, 0x7, 0x70, 0x2, [{{0x9, 0x4, 0xaf, 0x7, 0x6, 0xff, 0xff, 0xff, 0x3, [@generic={0x1e, 0xe, "aec5f6801e8ba2811e8a362bd4bc695ca509067b666fd02f95ea3ffa"}], [{{0x9, 0x5, 0xa, 0x18, 0x8, 0x4, 0x3, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xb1}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xe, 0x4, 0x5, [@generic={0x3d, 0x27, "53f604d497ddcdad55a5ad725051c7a3ca436d08eba505fb2e572ee5daa3ac7f9b1167e2efc634500cfe375f58ed97ff3177f38aad0ee228841b93"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x20, 0xfc, 0x5, 0x64, [@generic={0x101, 0x7, "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"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x1e, 0xee, 0xf, [@generic={0xdd, 0xe, "5e46c6252d61eef0544ca18e73591d0d135286963f00ecb471e71d2acb2311469db7d1b0d22686053d2a9fb052d60cff3159fda78f09196e506e259534287ec7c22f5dc0776f7fc6a475389576f9f010ed18bdd8292585df52419f6b2696a391b7d7d82e2f0732643dae2c68183dab90df87609d3971b67c063bbdacea8af069383204736473439c76f1000e82e8fabb841f32cf50c9ae5e780f4591b2e2ca8752271969e60119263e679617a8ecae02bb4c65b8acc817b157969a3644d4977ae353aa93d63bbaf7038946fa27c49377930db7aaa20fb951a94b9c"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x8, 0xb, 0xf, [@generic={0x79, 0x21, "4492a0c2f2e28df80f8ce6f28f29b9c5ea07c6049391302e95dee7239cdcc9ad5cd954e6895e9ae88165f326c86d95b2ca17886e78521a0d07ddd890bc78d44dded56454d8aa968126d284fa6fe87eef6786a2af737b7822e796a5f07f1a581b277fb9ef360345b799eee6a6ea2cfeff34d3c15ac6c6f2"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0x6, 0x88, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x37, 0x4}, @generic={0x100, 0x23, "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"}]}}]}}, {{0x9, 0x4, 0x8c, 0x27, 0x5, 0xc7, 0xc2, 0x9d, 0x9, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 'C'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x6, 0x8, 0xf6}, [@ncm={0x6, 0x24, 0x1a, 0x4976, 0x2}]}, @generic={0x49, 0x9, "dc4eabe46088dfc03f026ac39e6a6c9db81b4f180ed456c1f9b3fb6e6d113e3af8c970d516bce0fbf457978d1a3b700e45933a437fbfa9a1c2533f48f39bb6813b7504668c0a91"}], [{{0x9, 0x5, 0x8, 0x3, 0x40, 0x8, 0xf, 0x6, [@generic={0xa8, 0xe, "e9456dd496e657f1e7ae0edcbb05a84031b45c0fbf5bee961db603a867455c560b4784ad38803cf39b90ff01f3611909687f52596c9679350d2650f6386247cd5d539ab5c7a419948edc6bd3988adcb7f976604dbfd3e198a39a47086561bbdc8abeb9903c744a379d1b60c2f8b91d9fd4263d6c5a0aedd108658951a15311d80f2879583213794c0b5312a6f5754aeea112bb84c94107074478f7cebe5d8159d53c33d6a314"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3, 0xa, 0x0, [@generic={0xa4, 0x2, "bcdeed0a8845f9ea51f7cdddcee84b3e1262f99eff84a1dd10b17ecfee4ce4fc7fe52f4743b51456f46999489d999032c7fc2c6fa0fe4c6b51ce47227f2cfc830bb29b2a5b8feed9a34c3d1a3ce6e1d00b724b71750a6112d2893455e2b058e60308ed556fbe0b3b730de52a57ec9c17de7c371e16e3627b1f87a1346ae6ec7b885d32c48373d4a00f0e343ab44e32ddbb08163758dcc4f826ba3849af88c17a1502"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x2, 0x2, 0xd4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xd1, 0x3e}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x63, 0x7f}]}}, {{0x9, 0x5, 0x8, 0x4, 0x10, 0x0, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x26}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x8, 0x6, 0x4, [@generic={0x9f, 0x23, "9cfc0a533bf141f7b082c306a7d440670a654984dc2863f896da868d3e566812664002cb5c3cedaecf36cc3f02bf56b1eb485c15033b8a6fa7a97c2f5758e664d37a6108424a0b12f2dfe56034f7dde71dd8b8de5a04940592042ac070e6a13e7cd2d37945e0d25f2fd9485040e897c30d8ecc5126cd3a01430a557cc680ce5dc141b6099e645ac772667c363c3d6e21aa92b62ea414a070dbdff7bd1e"}]}}]}}, {{0x9, 0x4, 0x56, 0x3, 0x7, 0xd, 0xbb, 0xef, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x400, 0x4}, [@extension_unit={0x8, 0x24, 0x8, 0x2, 0x5, 0x9, "eb"}, @mixer_unit={0x5, 0x24, 0x4, 0x6, 0xb}, @input_terminal={0xc, 0x24, 0x2, 0x40, 0x202, 0x5, 0x2, 0x1ff, 0x4, 0x40}, @extension_unit={0xb, 0x24, 0x8, 0x2, 0x3, 0x80, "a9c17013"}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x5, 0x3, [0x1, 0x9, 0x4], 0x5}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0x9, 0x3}, {0x6, 0x24, 0x1a, 0x2b77}, [@mdlm_detail={0x27, 0x24, 0x13, 0x4, "70c038d225866b7cce7893180017c29cd79c13169489d1a9312744c44aa35e0d226502"}, @obex={0x5, 0x24, 0x15, 0xffff}, @mdlm={0x15, 0x24, 0x12, 0x8af4}, @country_functional={0xa, 0x24, 0x7, 0x5, 0x1000, [0x3, 0x1]}]}], [{{0x9, 0x5, 0x5, 0x1, 0x400, 0x2, 0x0, 0x23, [@generic={0xaa, 0x9, "601bbf9a76d6c7102ed605565fbca28c760b9a838d8b53d54b72ba983454819f34b7ebe60ee779da8631905853eba98ef69555e3a1d847d3e9b714ddfcb790c1212ae2cf230814bbdfcb922f8f1f53fef5cc8f2444f8a72378908453d3cc7d635498900316e031352bd7d7ed3bd28f98ed109205af92c8337816864f41c76ca69a83917eb0a22bedf152e93a9bd36469b10eb0f39abbf77011c84a0279dec554e1ab924f3ff70511"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0x81, 0x62, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0xd529}]}}, {{0x9, 0x5, 0x1, 0xc, 0x20, 0x3, 0xba, 0x5, [@generic={0x1d, 0x31, "60474ef02618bca165f7397b74bb307555cd842e805cde5fadcc86"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x20, 0x0, 0x3a, 0x1c, [@generic={0xc8, 0x7, "8e18ef3e295c06182308a67239ff9ef48059839d273d5f7d3bb222c5ab4ba82e6c76b745f9d5e8033819e0095b2320654968ade3289048de8b5c5d84e7e6af9fdcb8e6c55626b534aa7a809896bb11ffe87bf04494d47dcd4642e5db8f6787ca6af12f9cfdb529c62d7ae860259f2ef9ee641db76c47e107147a5936a08a433287826f5701371d13ed8988fb8e66ed7ceaab972db7d7b364f6c3316dd9889dc79132893cca96b091923a2ac1607d607430575982f04571f8ffc43fd80b4513fb03b8c4d84609"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x33}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0xa, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfd, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x80}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0xad, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x2}]}}, {{0x9, 0x5, 0x80, 0x0, 0x80121b764ecb90b2, 0xb, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x93, 0x12}]}}]}}, {{0x9, 0x4, 0x5e, 0x2, 0x8, 0xff, 0xff, 0x0, 0xca, [@uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xb, 0x2, 0x4, 0x98, "2fd288c322a2ea184a"}, @as_header={0x7, 0x24, 0x1, 0x10, 0xf, 0x1001}]}, @uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x40, 0x4, 0x33, 0x94, "2fa8", "4cb2"}, @as_header={0x7, 0x24, 0x1, 0xf, 0x7, 0x4}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x439, 0x72d, 0xff, "3391fe33f627efacf2"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x3}]}], [{{0x9, 0x5, 0xc, 0x0, 0x40, 0x1, 0xc, 0x30, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x86}]}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x5, 0x1, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xc3, 0x5}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0xfa, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x705}, @generic={0x73, 0x2, "bdc04541cf2b28639ebac85c783c08a8dff1acdbc1e3473293c91258dbdc44a4e112b6ea181105f14fc29eb929fdb48e28e774fee5567e2db87be4aa63baf4663a36bac86af11298ac136968a002b69be6f0daf0e3daf8d5eb567be2075f3f97985495f05cb8efb8935400a0d465ee9349"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x20, 0xea, 0xf0, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x6af}, @generic={0x35, 0x7, "11040fa0c5a6dd3557f2de1417524cd333aca88b39f59fae19edea0e9e722029b8e1cb6b168772d3f898a7a65e53743cb418e2"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x0, 0x9, 0xbd, 0x2c, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x62, 0x8001}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x8, 0xcb, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0x4}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x5, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0xf7, 0x42b3}, @generic={0x40, 0x31, "0d9d196072f78403c1ac4020a5095ea92cf4aafd06b17dbdecfbeaadf4d55162cb13dee4a4a70d034f12928bc03c899d39d4baa16f8bb1a2a7c6ed7c7369"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x400, 0x9, 0x3, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xfff7}]}}]}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x0, 0x3, 0x4, 0x10, 0xff, 0x9}, 0x58, &(0x7f0000000a80)=ANY=[@ANYBLOB="050f5800041c100a00e4ff1f000ff00600c03f00000f000000cf00ff00000000000710020c7940001410040266852951039f78cd77ee9475e30f45751c100a1a247700000f0030c1ed9d44b0f6efad94aa359e4b0309000fc08abb184828f4b2013102"], 0x6, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x42f}}, {0xf1, &(0x7f0000000400)=@string={0xf1, 0x3, "414ec9d690888b32a238d0691b12be23c8d0b9b0693b57c5678d148e0e071a772759580aebd9c9f4cc6a8a2b9e1c0e4e8defab1e6c5e4879330573f268dee47fd51da443e7f33ff93805de0a3cc3f5fd47ef823734c9737bcc8bbc9cce23a3d2a12208c908651c10927691184cccd59b644d6d945966b4af428d05af6260940c0ca8a8cd7647ed25a2c5eb3ae6c1bbb6e1948907e201f9947d7e6161db595ea6f6712974f564bdae47aad8a3979429c099a73168f72f6a5d2ab2b095151791b977a05dd17b4154d2999da79c452ebb54abbd70d2e490cf9ce4259ed02fc748f6f632a12335349f9af13d9634c6c4b6"}}, {0x10, &(0x7f0000000b40)=ANY=[]}]})
syz_usb_control_io$lan78xx(r2, &(0x7f0000000800)={0x14, &(0x7f0000000680)={0x20, 0x11, 0xdb, {0xdb, 0x21, "6f266fc694fa464b1d5511ba3974f25f6d89b1235996880c729685060293d2e46fd7c04a832e55a205a54d2f1285e20073e10aeb023505fb81ad573524aa398d031538cb0cb31aae1dd0c6e31f58a4e481dae14e38e712925ada89de0b4dc209da21b6b268d6c1e803b00306664f25465159db38bf951b58341ecaa25589a9e602abc52eb07aa25088ac97b170ace4d895e748567f358c188a3fb96c2cd915049ffbe92023f9768de347dbd941304e4b7421d0faf22d5a44662d6147424a35f3e55eeb9f567cda0f824ae4fdb7ad931c64776bc9c52d44ff29"}}, &(0x7f0000000780)={0x0, 0x3, 0x68, @string={0x68, 0x3, "fd464f6be80f06221b8f9ad43f912dfa766d4ff964c9a245768dd37f66c058dedca0b3e141b8ac9d421bd7f3a5e756709ce5511d1c4a8e899d81686845566f1dab2ca95f30ce0f8dff3bf144fdc0f16a2ce0a681b69acbdd2e84b9b577ee202bd4895e0ed754"}}}, &(0x7f0000000a40)={0x34, &(0x7f0000000840)={0x20, 0xf, 0xa8, "8ca06a6e458484c9308eeaacf011544dbd32a7b6c6fba1a162f4000665a6cdf4b3ebaa7fd260ed861fbe529355fa44b3b0a1556cc5090ec013034a78732deccdf5eabf67b658ad8c4ca194f8602f1b0d5e5bc3220bf128e7aee38c0e4fe1de0c0418f9b2998b8ed9af1c773e8e9ee2a5dad5803c7f3209a6c6c26d54ebf203692c4c11421b6814f643059adf4b369afe65710047448fa6db836229a74fbf713cb4289756b0fbbe26"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0xbb}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000980)={0xc0, 0xa1, 0x4, 0x6f20}, &(0x7f00000009c0)={0x40, 0xa0, 0x4, 0x10}, &(0x7f0000000a00)={0xc0, 0xa2, 0x2f, "fa9214e16fc9e2ecb82fb3276eb02fb03b4ca2bfce62deffcabf4d243402b6fa09a2e9d616fff91f55b0d6d5668789"}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0xa883, 0x92)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}})
ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x6)
r5 = socket$netlink(0x10, 0x3, 0xa)
dup(r5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b80)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
prctl$PR_SET_PTRACER(0x59616d61, r6)
connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
socket$kcm(0xa, 0x922000000003, 0x11)
executing program 32:
r0 = syz_usb_connect$uac1(0x0, 0x7f, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000000002b406b1d010140000102030109026d0003010070000904000000010100000a24010040000201020904010000010200000904010101010200000905010920000030000725010000000009040200000102000009040201010102000007240100f90300072401210000000905820910000000080725018100000065a7253045e735abb2e673b3517334e08dd149e80f3a4aed05eddbdcbf08424728031957261064c2c19a2764a9e6ed4a6097f8639aac3862d2de4aafe2b436acb2f65c0ac60053d8e1be0236f90a1e315ae609ccf9de0dcdef1a3d79c4"], 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000300)='syzkaller\x00'}, 0x94)
r2 = syz_usb_connect(0x0, 0xb16, &(0x7f0000002200)={{0x12, 0x1, 0x0, 0x38, 0x7b, 0x79, 0xff, 0x19d2, 0xffc0, 0x3112, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb04, 0x4, 0x1, 0x7, 0x70, 0x2, [{{0x9, 0x4, 0xaf, 0x7, 0x6, 0xff, 0xff, 0xff, 0x3, [@generic={0x1e, 0xe, "aec5f6801e8ba2811e8a362bd4bc695ca509067b666fd02f95ea3ffa"}], [{{0x9, 0x5, 0xa, 0x18, 0x8, 0x4, 0x3, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xb1}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xe, 0x4, 0x5, [@generic={0x3d, 0x27, "53f604d497ddcdad55a5ad725051c7a3ca436d08eba505fb2e572ee5daa3ac7f9b1167e2efc634500cfe375f58ed97ff3177f38aad0ee228841b93"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x20, 0xfc, 0x5, 0x64, [@generic={0x101, 0x7, "c9b543a71eaeb43636878ee8500cf57e39637b447aa862d8432a9b4545ad7acf4508548639602cbf61b1a67139b9c72146c3f90f154503434de5d4912fbecdc24f1225b6e9d18c861ec69a27ba668509b1bb48832e9803addb3c026169fa2d41ef88c41f0b55d59ff8296af8e1a906f93dd0231535fac1e7285b32ce27b4a1c2930e1841281d0a90b33422be66f1b86f62ba9360de2c5e1e246d6912edad03c1a5f04a9e9982ab7771b50d6e7467f7ad99f3a5ba7f3abd32458d9bae3fa4b30dacb430b3c6c736882ee59fff0145adb6b446e28ea77aae5e3a19a0d6f3ff49412a7d148096dbc1d1a273730856ac0ae5b9cb7eeefc434a01d4cea8e2ca224a"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x1e, 0xee, 0xf, [@generic={0xdd, 0xe, "5e46c6252d61eef0544ca18e73591d0d135286963f00ecb471e71d2acb2311469db7d1b0d22686053d2a9fb052d60cff3159fda78f09196e506e259534287ec7c22f5dc0776f7fc6a475389576f9f010ed18bdd8292585df52419f6b2696a391b7d7d82e2f0732643dae2c68183dab90df87609d3971b67c063bbdacea8af069383204736473439c76f1000e82e8fabb841f32cf50c9ae5e780f4591b2e2ca8752271969e60119263e679617a8ecae02bb4c65b8acc817b157969a3644d4977ae353aa93d63bbaf7038946fa27c49377930db7aaa20fb951a94b9c"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x8, 0xb, 0xf, [@generic={0x79, 0x21, "4492a0c2f2e28df80f8ce6f28f29b9c5ea07c6049391302e95dee7239cdcc9ad5cd954e6895e9ae88165f326c86d95b2ca17886e78521a0d07ddd890bc78d44dded56454d8aa968126d284fa6fe87eef6786a2af737b7822e796a5f07f1a581b277fb9ef360345b799eee6a6ea2cfeff34d3c15ac6c6f2"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0x6, 0x88, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x37, 0x4}, @generic={0x100, 0x23, "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"}]}}]}}, {{0x9, 0x4, 0x8c, 0x27, 0x5, 0xc7, 0xc2, 0x9d, 0x9, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 'C'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x6, 0x8, 0xf6}, [@ncm={0x6, 0x24, 0x1a, 0x4976, 0x2}]}, @generic={0x49, 0x9, "dc4eabe46088dfc03f026ac39e6a6c9db81b4f180ed456c1f9b3fb6e6d113e3af8c970d516bce0fbf457978d1a3b700e45933a437fbfa9a1c2533f48f39bb6813b7504668c0a91"}], [{{0x9, 0x5, 0x8, 0x3, 0x40, 0x8, 0xf, 0x6, [@generic={0xa8, 0xe, "e9456dd496e657f1e7ae0edcbb05a84031b45c0fbf5bee961db603a867455c560b4784ad38803cf39b90ff01f3611909687f52596c9679350d2650f6386247cd5d539ab5c7a419948edc6bd3988adcb7f976604dbfd3e198a39a47086561bbdc8abeb9903c744a379d1b60c2f8b91d9fd4263d6c5a0aedd108658951a15311d80f2879583213794c0b5312a6f5754aeea112bb84c94107074478f7cebe5d8159d53c33d6a314"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3, 0xa, 0x0, [@generic={0xa4, 0x2, "bcdeed0a8845f9ea51f7cdddcee84b3e1262f99eff84a1dd10b17ecfee4ce4fc7fe52f4743b51456f46999489d999032c7fc2c6fa0fe4c6b51ce47227f2cfc830bb29b2a5b8feed9a34c3d1a3ce6e1d00b724b71750a6112d2893455e2b058e60308ed556fbe0b3b730de52a57ec9c17de7c371e16e3627b1f87a1346ae6ec7b885d32c48373d4a00f0e343ab44e32ddbb08163758dcc4f826ba3849af88c17a1502"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x2, 0x2, 0xd4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xd1, 0x3e}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x63, 0x7f}]}}, {{0x9, 0x5, 0x8, 0x4, 0x10, 0x0, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x26}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x8, 0x6, 0x4, [@generic={0x9f, 0x23, "9cfc0a533bf141f7b082c306a7d440670a654984dc2863f896da868d3e566812664002cb5c3cedaecf36cc3f02bf56b1eb485c15033b8a6fa7a97c2f5758e664d37a6108424a0b12f2dfe56034f7dde71dd8b8de5a04940592042ac070e6a13e7cd2d37945e0d25f2fd9485040e897c30d8ecc5126cd3a01430a557cc680ce5dc141b6099e645ac772667c363c3d6e21aa92b62ea414a070dbdff7bd1e"}]}}]}}, {{0x9, 0x4, 0x56, 0x3, 0x7, 0xd, 0xbb, 0xef, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x400, 0x4}, [@extension_unit={0x8, 0x24, 0x8, 0x2, 0x5, 0x9, "eb"}, @mixer_unit={0x5, 0x24, 0x4, 0x6, 0xb}, @input_terminal={0xc, 0x24, 0x2, 0x40, 0x202, 0x5, 0x2, 0x1ff, 0x4, 0x40}, @extension_unit={0xb, 0x24, 0x8, 0x2, 0x3, 0x80, "a9c17013"}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x5, 0x3, [0x1, 0x9, 0x4], 0x5}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0x9, 0x3}, {0x6, 0x24, 0x1a, 0x2b77}, [@mdlm_detail={0x27, 0x24, 0x13, 0x4, "70c038d225866b7cce7893180017c29cd79c13169489d1a9312744c44aa35e0d226502"}, @obex={0x5, 0x24, 0x15, 0xffff}, @mdlm={0x15, 0x24, 0x12, 0x8af4}, @country_functional={0xa, 0x24, 0x7, 0x5, 0x1000, [0x3, 0x1]}]}], [{{0x9, 0x5, 0x5, 0x1, 0x400, 0x2, 0x0, 0x23, [@generic={0xaa, 0x9, "601bbf9a76d6c7102ed605565fbca28c760b9a838d8b53d54b72ba983454819f34b7ebe60ee779da8631905853eba98ef69555e3a1d847d3e9b714ddfcb790c1212ae2cf230814bbdfcb922f8f1f53fef5cc8f2444f8a72378908453d3cc7d635498900316e031352bd7d7ed3bd28f98ed109205af92c8337816864f41c76ca69a83917eb0a22bedf152e93a9bd36469b10eb0f39abbf77011c84a0279dec554e1ab924f3ff70511"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0x81, 0x62, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0xd529}]}}, {{0x9, 0x5, 0x1, 0xc, 0x20, 0x3, 0xba, 0x5, [@generic={0x1d, 0x31, "60474ef02618bca165f7397b74bb307555cd842e805cde5fadcc86"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x20, 0x0, 0x3a, 0x1c, [@generic={0xc8, 0x7, "8e18ef3e295c06182308a67239ff9ef48059839d273d5f7d3bb222c5ab4ba82e6c76b745f9d5e8033819e0095b2320654968ade3289048de8b5c5d84e7e6af9fdcb8e6c55626b534aa7a809896bb11ffe87bf04494d47dcd4642e5db8f6787ca6af12f9cfdb529c62d7ae860259f2ef9ee641db76c47e107147a5936a08a433287826f5701371d13ed8988fb8e66ed7ceaab972db7d7b364f6c3316dd9889dc79132893cca96b091923a2ac1607d607430575982f04571f8ffc43fd80b4513fb03b8c4d84609"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x33}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0xa, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfd, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x80}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0xad, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x2}]}}, {{0x9, 0x5, 0x80, 0x0, 0x80121b764ecb90b2, 0xb, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x93, 0x12}]}}]}}, {{0x9, 0x4, 0x5e, 0x2, 0x8, 0xff, 0xff, 0x0, 0xca, [@uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xb, 0x2, 0x4, 0x98, "2fd288c322a2ea184a"}, @as_header={0x7, 0x24, 0x1, 0x10, 0xf, 0x1001}]}, @uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x40, 0x4, 0x33, 0x94, "2fa8", "4cb2"}, @as_header={0x7, 0x24, 0x1, 0xf, 0x7, 0x4}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x439, 0x72d, 0xff, "3391fe33f627efacf2"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x3}]}], [{{0x9, 0x5, 0xc, 0x0, 0x40, 0x1, 0xc, 0x30, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x86}]}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x5, 0x1, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xc3, 0x5}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0xfa, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x705}, @generic={0x73, 0x2, "bdc04541cf2b28639ebac85c783c08a8dff1acdbc1e3473293c91258dbdc44a4e112b6ea181105f14fc29eb929fdb48e28e774fee5567e2db87be4aa63baf4663a36bac86af11298ac136968a002b69be6f0daf0e3daf8d5eb567be2075f3f97985495f05cb8efb8935400a0d465ee9349"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x20, 0xea, 0xf0, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x6af}, @generic={0x35, 0x7, "11040fa0c5a6dd3557f2de1417524cd333aca88b39f59fae19edea0e9e722029b8e1cb6b168772d3f898a7a65e53743cb418e2"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x0, 0x9, 0xbd, 0x2c, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x62, 0x8001}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x8, 0xcb, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0x4}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x5, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0xf7, 0x42b3}, @generic={0x40, 0x31, "0d9d196072f78403c1ac4020a5095ea92cf4aafd06b17dbdecfbeaadf4d55162cb13dee4a4a70d034f12928bc03c899d39d4baa16f8bb1a2a7c6ed7c7369"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x400, 0x9, 0x3, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xfff7}]}}]}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x0, 0x3, 0x4, 0x10, 0xff, 0x9}, 0x58, &(0x7f0000000a80)=ANY=[@ANYBLOB="050f5800041c100a00e4ff1f000ff00600c03f00000f000000cf00ff00000000000710020c7940001410040266852951039f78cd77ee9475e30f45751c100a1a247700000f0030c1ed9d44b0f6efad94aa359e4b0309000fc08abb184828f4b2013102"], 0x6, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x42f}}, {0xf1, &(0x7f0000000400)=@string={0xf1, 0x3, "414ec9d690888b32a238d0691b12be23c8d0b9b0693b57c5678d148e0e071a772759580aebd9c9f4cc6a8a2b9e1c0e4e8defab1e6c5e4879330573f268dee47fd51da443e7f33ff93805de0a3cc3f5fd47ef823734c9737bcc8bbc9cce23a3d2a12208c908651c10927691184cccd59b644d6d945966b4af428d05af6260940c0ca8a8cd7647ed25a2c5eb3ae6c1bbb6e1948907e201f9947d7e6161db595ea6f6712974f564bdae47aad8a3979429c099a73168f72f6a5d2ab2b095151791b977a05dd17b4154d2999da79c452ebb54abbd70d2e490cf9ce4259ed02fc748f6f632a12335349f9af13d9634c6c4b6"}}, {0x10, &(0x7f0000000b40)=ANY=[]}]})
syz_usb_control_io$lan78xx(r2, &(0x7f0000000800)={0x14, &(0x7f0000000680)={0x20, 0x11, 0xdb, {0xdb, 0x21, "6f266fc694fa464b1d5511ba3974f25f6d89b1235996880c729685060293d2e46fd7c04a832e55a205a54d2f1285e20073e10aeb023505fb81ad573524aa398d031538cb0cb31aae1dd0c6e31f58a4e481dae14e38e712925ada89de0b4dc209da21b6b268d6c1e803b00306664f25465159db38bf951b58341ecaa25589a9e602abc52eb07aa25088ac97b170ace4d895e748567f358c188a3fb96c2cd915049ffbe92023f9768de347dbd941304e4b7421d0faf22d5a44662d6147424a35f3e55eeb9f567cda0f824ae4fdb7ad931c64776bc9c52d44ff29"}}, &(0x7f0000000780)={0x0, 0x3, 0x68, @string={0x68, 0x3, "fd464f6be80f06221b8f9ad43f912dfa766d4ff964c9a245768dd37f66c058dedca0b3e141b8ac9d421bd7f3a5e756709ce5511d1c4a8e899d81686845566f1dab2ca95f30ce0f8dff3bf144fdc0f16a2ce0a681b69acbdd2e84b9b577ee202bd4895e0ed754"}}}, &(0x7f0000000a40)={0x34, &(0x7f0000000840)={0x20, 0xf, 0xa8, "8ca06a6e458484c9308eeaacf011544dbd32a7b6c6fba1a162f4000665a6cdf4b3ebaa7fd260ed861fbe529355fa44b3b0a1556cc5090ec013034a78732deccdf5eabf67b658ad8c4ca194f8602f1b0d5e5bc3220bf128e7aee38c0e4fe1de0c0418f9b2998b8ed9af1c773e8e9ee2a5dad5803c7f3209a6c6c26d54ebf203692c4c11421b6814f643059adf4b369afe65710047448fa6db836229a74fbf713cb4289756b0fbbe26"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0xbb}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000980)={0xc0, 0xa1, 0x4, 0x6f20}, &(0x7f00000009c0)={0x40, 0xa0, 0x4, 0x10}, &(0x7f0000000a00)={0xc0, 0xa2, 0x2f, "fa9214e16fc9e2ecb82fb3276eb02fb03b4ca2bfce62deffcabf4d243402b6fa09a2e9d616fff91f55b0d6d5668789"}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0xa883, 0x92)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}})
ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x6)
r5 = socket$netlink(0x10, 0x3, 0xa)
dup(r5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b80)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
prctl$PR_SET_PTRACER(0x59616d61, r6)
connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
socket$kcm(0xa, 0x922000000003, 0x11)
executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000c00)="f4"}, 0x20)
keyctl$dh_compute(0x17, &(0x7f0000001200), 0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={'hmac(streebog512)\x00'}})
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
syz_usb_connect$cdc_ncm(0x7, 0xd2, &(0x7f0000001680)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x2, 0x1, 0x7f, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "e82e68"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xf474, 0xe, 0x3ff, 0x5}, {0x6, 0x24, 0x1a, 0x0, 0x20}, [@mbim_extended={0x8, 0x24, 0x1c, 0x59b0, 0xe, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0xff, 0x9, 0x8, 0x5}, @mdlm_detail={0x1c, 0x24, 0x13, 0x6, "4a501bbf529c35344fa1b5321a7f2e773973be0f9fb2596e"}, @mdlm={0x15, 0x24, 0x12, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x7, 0x6, 0x3, 0x100, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x200}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x19, 0x7, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x65, 0x5, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x8, 0x8}}}}}}}]}}, &(0x7f0000001780)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x49, 0x9, 0xe7, 0x10}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x3, [{0x30, &(0x7f0000000280)=@string={0x30, 0x3, "459e98bed5789ac37d252cc67edbbc23c749297a5e0df5ce4f39fda26762d06879ae2019216c6a052a370685f140"}}, {0x77, &(0x7f0000000440)=@string={0x77, 0x3, "59fdce2c502919fdbb717b60ff2d34ddc8dc32d458ef204335ee17ecb80298a6e9131c09984945981f1122332bfb8b7d6da78d1c1c8487de21d43c582943e1444492ea8eecd28c4ae0f538ab51742d6f13f76a3e343cb55646aa3feb6783ce60292e050ecd77f651ef6424f886ef095fce09d0801f"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x43e}}]})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0)
sendfile(r2, r2, &(0x7f0000000080), 0x7f03)
utimes(&(0x7f0000000400)='.\x00', &(0x7f0000000500)={{0x0, 0x2710}})
r3 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97)
getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8)
r4 = io_uring_setup(0x2e01, &(0x7f0000000040)={0x0, 0xafd2, 0x1000, 0x2, 0x2ca})
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000540)=[{0x0}], 0x1)
r5 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x28e, 0x0, r4})
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x6, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000180)={{0x0, 0x80}, {0xfffffffffffffff7, 0x1}, 0x1bb, 0x1})
ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000000680)={[0xfffffbff, 0x80, 0x8001, 0xe3, 0x1, 0x9, 0x6, 0x0, 0x5, 0xe00, 0x874d, 0x2, 0x3d9092bd, 0x8, 0x9, 0x9, 0x8, 0x2, 0x4, 0x7f, 0x4, 0x0, 0x9, 0x8, 0x6, 0x1, 0x0, 0x400, 0x4, 0x885, 0xffffffbc, 0x1, 0x8, 0xffff, 0x8, 0x0, 0x32, 0x0, 0x4, 0x3, 0xba, 0x2, 0x7, 0x6, 0xe7, 0x6, 0x9, 0xb, 0x5, 0x4, 0x3, 0x7b, 0x1ff, 0x4, 0x0, 0x6, 0x361, 0x0, 0x40, 0x4a, 0x3, 0x8, 0x66, 0xff, 0x3, 0x8, 0x7, 0x2, 0x7, 0x4, 0x36, 0xfb2, 0x2, 0x3, 0x4, 0xaa, 0x9480, 0x36b1, 0x1, 0x4, 0xc40f, 0x5, 0x4, 0x0, 0x0, 0x8, 0x80000000, 0x3, 0x40, 0x6, 0x4, 0x6, 0x9, 0x2, 0x1, 0x0, 0x4, 0x7, 0x341a, 0x3, 0x81, 0x6, 0x7, 0x10001, 0xfffffff8, 0x43, 0x0, 0x40, 0x81, 0x2, 0x94, 0x3, 0x1000, 0x1, 0x9, 0xa, 0x5, 0x80000001, 0x2, 0x4, 0x35, 0x0, 0x0, 0x46, 0x45bb, 0x9, 0x1, 0xd, 0x3, 0x3, 0x5, 0x6, 0x9, 0x3726, 0x3, 0x8, 0x1, 0x5623, 0x3503, 0x8000, 0x5, 0x10, 0x6, 0x7, 0x5, 0x4, 0x3, 0x6, 0xffffff20, 0x6, 0x40, 0x1, 0x7ff, 0x1, 0x7, 0x6, 0x4, 0x3, 0x401, 0x3fd, 0x4, 0x0, 0xfff, 0xcf, 0x60d, 0x5, 0xe, 0x70a, 0x4, 0x1, 0x5, 0xe98, 0x5a253222, 0x1, 0x9c, 0xcb, 0x3, 0x1000, 0x200, 0x2, 0x101, 0x7, 0x1, 0x743, 0x5, 0x4, 0x1, 0x5, 0x6, 0x2, 0x9, 0x1, 0x2, 0x80000, 0x6, 0xa48, 0x5575d5eb, 0xe, 0x4, 0x3, 0x7, 0x8000, 0x8, 0x9, 0x5, 0x7fffffff, 0x401, 0x8001, 0x2, 0x9, 0x9, 0xfffffffc, 0x2, 0x8, 0xc05, 0x56, 0x7, 0xfffffffd, 0x40, 0x0, 0x6, 0x1, 0x4, 0x4, 0x1, 0x80000001, 0x5, 0x1c91e0, 0x800, 0x0, 0x7, 0x1, 0x5, 0x5, 0x7, 0x1000, 0x6, 0xfe0000, 0x8, 0x328, 0xa3, 0x800, 0x8, 0x8, 0x9, 0x5, 0x5, 0x8, 0x8, 0xd45, 0x5, 0x0, 0x6, 0x3, 0x2, 0x7, 0xdd9, 0xfffffff8, 0x101, 0xcd, 0x400000, 0x3ff, 0x7, 0x17b8, 0x6, 0x3, 0x1, 0xc, 0xfff, 0x7, 0x7fffffff, 0x9, 0xfffffff7, 0x5, 0xfff, 0x9, 0xd40b, 0xffffffff, 0x2, 0xfffff54a, 0x4, 0x80000000, 0x1, 0xffffb812, 0xda3, 0xab9, 0x3, 0x5, 0x9, 0x600, 0x51be, 0x200, 0x2, 0x1, 0x6, 0xfffffffe, 0x1, 0x6, 0x90, 0x0, 0xc3c, 0x8, 0x0, 0x3, 0xffff, 0x3, 0x15, 0x9, 0x1000, 0x9, 0x0, 0x3, 0x1, 0x101, 0x4, 0x7fff, 0x10, 0x8, 0x10, 0x4, 0x81, 0x2, 0x6, 0xfffffff4, 0x3, 0x8, 0x2, 0xc, 0x6, 0xfffffffb, 0x3, 0xff, 0x1, 0x9, 0xdde0, 0xffff, 0x10001, 0xffff, 0x6, 0x4, 0x2, 0x80000000, 0x3, 0x8001, 0xa, 0xd4, 0x5, 0x2, 0xb, 0xfffffffb, 0xd, 0x4, 0x3a0, 0x5b8, 0x3, 0x8, 0x6, 0x9, 0xff, 0x8000, 0x4, 0xe12, 0x6, 0xffffff01, 0x4, 0xfdbf, 0x3, 0x6, 0x8, 0xfffffffb, 0x10000, 0x892c, 0x31b, 0xfffffff8, 0x7367, 0xfffffffb, 0x6, 0x8000, 0x80, 0x1, 0x8, 0x6, 0x4, 0x80, 0x5, 0x4, 0x0, 0xca, 0x6, 0x4, 0x4, 0x735, 0x10000, 0x6, 0x8, 0xffff0b69, 0x6, 0xb8c4, 0x8000, 0x8, 0x0, 0xe, 0x6, 0x4, 0x9, 0x7fff, 0x42, 0xcf2b, 0xfffffffc, 0x2, 0x0, 0x49fa, 0xb549, 0xffff, 0x2de, 0x1, 0x2a3f, 0x3080, 0x7fffffff, 0x0, 0x2, 0x5b, 0x8, 0x2, 0xd, 0x7fff, 0x41a0000, 0x1ff, 0x2d, 0x8f0b, 0x5, 0x8000, 0x2, 0x7, 0x86, 0x10001, 0x34, 0xf57, 0xfffffff5, 0x6bff, 0x6, 0x6, 0x7, 0xfff, 0xc, 0x48, 0x81, 0x9, 0x3, 0x10000000, 0x3, 0x9, 0x3, 0x7, 0x8, 0xa, 0x4, 0x30000000, 0x5, 0x38, 0x7, 0x1, 0xfffffff9, 0x7, 0x8, 0xd2, 0x3ff, 0xc96, 0x4, 0x4, 0xe0, 0x10, 0x4, 0x101, 0x100, 0x1, 0xff, 0x7f, 0x6, 0x6, 0x16f1c, 0x6d, 0xffff617b, 0x0, 0x8, 0x5, 0x1e, 0xffffffff, 0x2, 0x60, 0xff, 0xfffffffd, 0x0, 0x4, 0xd1, 0xff, 0x9, 0x1, 0xfffff000, 0x3, 0xffffffff, 0xa, 0x0, 0xfffffff9, 0x0, 0x4, 0x9, 0x6, 0x8, 0x6, 0x5, 0x94, 0x100, 0x7fffffff, 0x5, 0x8, 0x2, 0x4, 0x5, 0xfffffff8, 0x8, 0x9, 0x2, 0x8, 0xaf37, 0x1, 0x0, 0x26, 0x5, 0x2, 0x7, 0xff, 0x0, 0x7, 0x37, 0xffffffff, 0x8, 0x5, 0x9, 0x2, 0x2, 0x1, 0xa, 0x9, 0x8, 0x8, 0x62e1, 0x101, 0xfffff733, 0x1000, 0x518a, 0x2804, 0x87b, 0xfffffffc, 0xa8, 0x7fff, 0x400, 0x8, 0x1, 0x9, 0x68170000, 0x9, 0x7, 0x1e, 0x3ff, 0x1, 0x8, 0xfffffff7, 0x200, 0xffff0001, 0x2, 0x74, 0x7, 0xe74a, 0xfffffe01, 0xb074, 0x6a, 0x5, 0x9, 0x400, 0xc, 0x10001, 0x4b46, 0x642f, 0x80000000, 0x8, 0x8000, 0x80000001, 0x80000001, 0x6, 0x510, 0x3, 0x3, 0xffffffff, 0x3, 0x3, 0x5, 0x80, 0x10, 0x4, 0x1, 0x3, 0x9, 0xd44, 0x7, 0x4, 0x0, 0x9, 0x3, 0x2, 0x609, 0x1, 0x9, 0x9, 0xffff9757, 0x8000, 0x7f, 0x9, 0x5, 0x95, 0x80000000, 0x4, 0x3, 0x7fff, 0x9, 0x4, 0xb, 0x2, 0x38e, 0x7, 0x9d, 0x10001, 0xfff, 0x7f, 0x15a38cb0, 0xfffffffa, 0xe8b3, 0x100, 0x47b, 0x0, 0x10, 0xe22, 0x5, 0x7, 0x0, 0x2, 0x80000001, 0x9, 0xfff, 0x8, 0x7, 0x5, 0x0, 0x3ff, 0x7002, 0x6, 0x8, 0x4, 0xed, 0xf4, 0xde38, 0x200, 0x2, 0x7, 0x8340, 0xb, 0x2, 0x5, 0x6, 0x8000, 0x7, 0x1ff, 0x7fffffff, 0x8, 0x0, 0x7fffffff, 0xf, 0x5, 0x7, 0x2, 0x7, 0x7fff, 0x3, 0x7fffffff, 0x1, 0x1, 0x80000000, 0xea, 0x692, 0xc9f, 0x7, 0x9, 0x7ff, 0x1, 0x59e2, 0x3, 0x0, 0x8000, 0x3, 0x6, 0xfffff64b, 0x6, 0xa6, 0x0, 0x9, 0x7, 0x2, 0xffff, 0x2dc1, 0x3, 0x5, 0x5, 0x4, 0x1, 0x7, 0x26, 0x5, 0x1000, 0x10, 0x2, 0xad, 0xb, 0x8, 0xcc, 0x1b9f, 0x3ff, 0x4d17, 0x8, 0x4, 0x6, 0x24, 0xfff, 0x1000, 0x4dd0, 0xff, 0x7fff, 0x7, 0x8, 0x9, 0x5, 0x10000, 0x9, 0xffffffda, 0x7f, 0x2, 0x0, 0x6, 0x1ff, 0x93ae, 0x7fff, 0x4, 0x1, 0xa00, 0x1ff, 0x7, 0x10000, 0x10, 0x8, 0x6, 0x6, 0x6, 0x9, 0x3, 0x3, 0x40, 0x7, 0x40, 0x2, 0x200, 0xfffffff9, 0x80000000, 0x6, 0xfffffff8, 0x6, 0x1, 0x1, 0x1c63, 0x9, 0xfaf, 0x8, 0x3, 0x9, 0x4, 0x3, 0x8, 0x3, 0x7, 0xfffffffb, 0xff, 0xb096, 0x4, 0xcb, 0x401, 0x8c6, 0x10000, 0x920, 0x0, 0xffffffa2, 0x3, 0x8, 0x6, 0x18, 0x7, 0x7, 0x4, 0x7, 0x664, 0x8, 0xcba, 0x2, 0x401, 0x2, 0x3, 0x3331316e, 0x7, 0xf, 0x2, 0x4, 0x6, 0x3, 0x4, 0x2, 0x4, 0x2, 0x7, 0x7, 0x6c19, 0x2, 0x6, 0x1, 0x4, 0x1, 0x8000, 0x5, 0x1, 0x311, 0x4, 0x7ff, 0xff, 0x7, 0xdb, 0x7f, 0x9, 0x1, 0x8, 0x4, 0xb6b, 0x9, 0x7, 0x3, 0x9, 0x5, 0x7, 0x0, 0x10000, 0x1, 0x7, 0x4, 0x5, 0xc, 0x0, 0x9, 0xfffffff7, 0x3, 0x1, 0x5b, 0x5, 0x3, 0x6, 0xd, 0x8000, 0x0, 0x2, 0x0, 0x40, 0xffffe42f, 0x3, 0x0, 0x8, 0x9, 0xa1e, 0x401, 0x3, 0x51, 0x2, 0x1000, 0x2, 0x753c, 0x1e, 0x7, 0x6, 0x94, 0x4, 0x2, 0x10001, 0x40, 0x5d3, 0x28b2, 0xf, 0x3, 0x0, 0x2ee, 0x1, 0x9, 0xf, 0x5, 0x84b, 0x10001, 0x2, 0x2, 0x1, 0x9, 0xfffffda9, 0x2fe, 0x4, 0x4, 0x5, 0x545, 0x6, 0x7, 0x0, 0x650, 0x3, 0x9, 0xb9, 0x5, 0x79, 0x2, 0x9, 0x101, 0x1, 0x38, 0xef0, 0x2cb, 0xfa06, 0x200, 0x7, 0x80000000, 0xffff3818, 0xd0, 0x5, 0x9, 0x7f, 0xff, 0x4, 0x1, 0x7, 0xf736, 0x8, 0x23c6, 0x7, 0x401, 0x100, 0x5, 0x2, 0xfffffff8, 0x5, 0x2, 0xbf1, 0x467c8826, 0xffff, 0x4, 0x7ff, 0x6, 0x5, 0x6, 0x1000, 0x7ff, 0x1, 0x9, 0x0, 0x3a9, 0x7, 0xb, 0xc, 0x9, 0x1, 0x10, 0x0, 0x2, 0x8, 0xa4, 0x7, 0x0, 0x3, 0x9, 0x10000000, 0x7, 0x6, 0xf, 0x7, 0x5, 0x5, 0xb3aa, 0x2, 0xab9, 0x0, 0x49, 0x9, 0x4, 0x0, 0x4f9, 0x7fff, 0x7, 0x3, 0x9000, 0x6, 0x8, 0x3, 0x10000, 0x7, 0x6, 0x8, 0x793c, 0x4, 0x56a, 0x7, 0x3, 0x886, 0x5, 0x8, 0x0, 0x7fffffff, 0xe34]})
io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r4], 0x1)
executing program 3:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7'])
chdir(&(0x7f0000000240)='./file0\x00')
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0xb0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x10000, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x1000, 0x1)
chdir(&(0x7f00000003c0)='./bus\x00')
open(&(0x7f0000000040)='.\x00', 0x418601, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet6(r1, 0x0, 0x0, 0x4000000)
executing program 3:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000001280)=ANY=[], 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket(0x200000000000011, 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10)
setgid(0x0)
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002dc0)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0)
executing program 3:
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x8, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)
close(r0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102001, 0x0)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
ioctl$TIOCGPTPEER(r3, 0x5441, 0xb3d)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8)
executing program 33:
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x8, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)
close(r0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102001, 0x0)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
ioctl$TIOCGPTPEER(r3, 0x5441, 0xb3d)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8)
executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
getpid()
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/comedi4\x00', 0x600, 0x0)
ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000040)={0xffffffff, 0x1003, 0x10})
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102368, 0x18fe0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x2040600)
r2 = add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d790", 0x2, 0xfffffffffffffffe)
syz_emit_ethernet(0x76, 0x0, 0x0)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x6)
read$msr(r3, &(0x7f0000000300)=""/137, 0x89)
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe2$watch_queue(0x0, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x90)
keyctl$update(0x2, r2, &(0x7f0000000240)="ac", 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, 0x8000000, 0x1, 0xff, 0x1}, 0x20)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000aaa000/0xe000)=nil, 0xe0fe}})
syz_usb_connect(0x0, 0x34, &(0x7f0000000440)=ANY=[@ANYRESOCT=r2], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
executing program 5:
r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1a, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x40, 0xc, 0x77, 0x2}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x7, {0x7, 0x11, "e4ff14eca8"}}, 0x0}, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000800)={0x14, &(0x7f00000001c0)={0x40, 0xb, 0x8d, {0x8d, 0x3, "6ea51e340468501c6fa2af770858877676c363eb900605c985317ab0e717f2e51d87e4cf1899e5f625e39b7ba263f90ac1ccbc3272175d98550f8d60ce6a4032f4e7250b3e1414501537ed54f7102c2d69b1290c9599439ce02ff211b5fd2ee3c71045627465265b43c78cab17a84e67a0758f0c2eb86a66af74bc79c3142dd495831e3cad5e7ed28d5be3"}}, &(0x7f0000000280)={0x0, 0x3, 0x35, @string={0x35, 0x3, "44e5deabe5b151a2a2665a2e5da1765d9ee15aa391bfff89257ea2ed68542930ef3b8f6205738227b55ad56664b0b1936e2f90"}}}, &(0x7f00000007c0)={0x1c, &(0x7f0000000840)={0x40, 0x3, 0x94, "72651c60af21782b33b43e8abae2dda8a55a38efb11d07f1d12c227cd36955e35e7ee070f2be39a762a129c7d165fd7826de0b735ddd86fbcb733cb7d7b3924cf5107ae291635b1cee150917556cb1a6fcd9a0cf37c05251b709359645d7a20eac78b8bba7b4d5e411df5adb795455e5b1f03a401b406ef03c127902b39333d20d1340d64d47a592aac9aa0e132114ae90e9ebce"}, &(0x7f0000000340)={0xa1, 0x1, 0x400, "adff14e092961c3217cb928bea33eb5b2cff516d9011b4b1eb98d5c446fa4fb8bfcc219f00066c42217cb6fe7776f0775db724e22671e15e8a0f6d613384a5d4ebbe1f71b4ba1887ac2ee3661e127d109aafcf0a16077d319756758fa91f17d52fd05872642871d3c756dd20e21c6d4f509d931e4cffa863adacabaddb3b185a2e675b7908afdc3221e497b5fca150b65e543987684a72b0198e5516d59d02a54814fb357928469af9d836d312362f02c5a7c0c54202e15a0802b467506c2170c330661b9662c5885dd5d5d9d8d5dee9ee696ae10d11cfd6b99d8325da697eca7a888278915eb4db83b307f29bcb1cbf85a9d18cf55182a9e2b4d9c17fc30830ae3671d6448d158eda383c7ffd2d2114aa7580c9198054470b68536eae430966df18735825853547143fc1ae1ab41542dc281f82f71070070c348e4cec755a907a810b9a50721cacd7093fa617296d7fe4cb45bcfc65a8b24af103bcc5fba9010e0cc29eca5d7c9f68292fd1fb17c5360a3338a98ed3ca204ad0af659758dfd03ae0a498e7d231221494c49e93f9c3fd29470041702d9277adc44890bfbe6e0de8d06c9620be5aff10e8f99549ca8527b086280f858e5f34eff1e963017be7590e5b4104622331d36cbd00e34a177c67d338958d76d9295234747e2341784a6df51c22d547bd868b507db2b1fa6fed9c0628e7014a1fba979f1923fe7edfb1fa6a6b5a222e97b8ddd74055501e1da563d33ff57060690bb77b428c66afec68b077afe802f1ceda2aad701904021c73999292bb995a813bc9cac644d53a8d1932a28b4997ae2a55ae91c7176c790ef12ef942a7bc18a7d3759dec56d81eafb91b7ff8acd8531898bf7edd7ceeefb157d600607a52af7f0f67383dee75cc4acf85022bd339affb15ec9d01ce26dc87d03d885fc3cb0ac931bc3181f5f72338cdaebb49b9b5fb89b53ea5912a66a33cce08bdb7db839e9deff1568677a3b5619fb4f708f98c37f762278acd12cb7f6fca38f7a2798e040a86de80186bdb1e6372abcf2fb19e3c530c4b37cb2a7ac4922ea9c22fa38a1fba6da01aa593874ffd1435b0015d602991b9b370d5ed3635aee276a22b309c240ff2c0e08ca7a6bd408e6993395a8bd326f1698d501c643b8ed6561ae290f614c0a593c83096f36e80e7ed22150a4cf70e5cbf7dd1b9e0a1564c9edb73173fe931d438626b889630813ea0646a18eb492e35adadda6b53053fc46390ffc2c558a75fa327d14b2a32f91737ee74b89fd8e4c623a6f9ec0929e18dabad21aeca4a1f0222212c4ebb9b36174abe93f9143d267508c571270d2190b8b1790105b51aa43c0030a94df0624c3edd157f55a5e01a3d581a855772ba7b98a9e830b188600217adf73932a9245f3f05199b3a6161352d9a7344b6fed4e2609cf3cf7022cccecab90f7f5ce938329f16"}, &(0x7f0000000780)={0x21, 0x0, 0x4, "497aba7e"}})
executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00')
r1 = syz_open_dev$swradio(&(0x7f0000002a40), 0x1, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e00030000000300000005000700080000008e9363c4c553ed462c985832579f4dacc9eb9273954201a3272706dafa5114ce0875ac03d836cd8057e02095ec225f81c53015755d99f73c34f53873cb9f1192bb923542dd94e868827372da"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
sendmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18, 0x800}, 0x0)
recvmsg(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x4, 0x8, 0xb}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x200000000000011, 0x2, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x8000, 0x40009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0xa, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x3, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0x45c)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r11, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000002b00)=@mmap={0x100, 0x7, 0x4, 0x800, 0x5, {0x77359400}, {0x2, 0x2, 0xf9, 0x5, 0xf, 0x0, "c41ae572"}, 0x8, 0x1, {}, 0xc7f5})
fchdir(r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240400c4}, 0xc004000)
r12 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000008d904c2a000000000000109022400010000b000090400faff030001000921f6f40001220500090581030800030009e3be2cd8697ebc78"], 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004004}, 0x4004001)
syz_usb_control_io$hid(r12, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0xfffffffffffffffe, 0x10120)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000480)={0x0, 0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f00000000c0), 0x1000082, &(0x7f0000000100)={[], [{@obj_role={'obj_role', 0x3d, '/dev/\xecE\x89\xe6\xb6\x95k\xf5\xff\xff\xff\xff\xff\xff\x0f{\xad\xd4s\x04S2\xe6\xfbmA\xe3&\x84\x96\xbf\xc2\xe3ARYv]\xadE\x82\xaa\xdbb'}}]})
accept$phonet_pipe(r0, &(0x7f0000000080), &(0x7f0000000140)=0x10)
socket$nl_route(0x10, 0x3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x80000018})
shutdown(0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x10000, 0x1, 0x8000000, 0x1000, &(0x7f0000ffe000/0x1000)=nil})
epoll_create1(0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, 0x0, 0xc000)
sched_setaffinity(0x0, 0xff02, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca4bb6", "9ecb592c6ee49fbd"}, 0x28)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
socket$netlink(0x10, 0x3, 0x10)
readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/50, 0x32}, {&(0x7f0000000280)=""/203, 0xcb}, {&(0x7f0000000380)=""/11, 0xb}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/226, 0xe2}], 0x5)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x400000}, 0xc)
executing program 4:
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x42}, 0x0, 0x0})
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000f40), 0x40, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000), 0x181cc0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000280)={0x40}, 0x0, 0x0})
syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x42}, 0x0, 0x0}) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000f40), 0x40, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000), 0x181cc0, 0x0) (async)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000280)={0x40}, 0x0, 0x0}) (async)
executing program 1:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sysfs$1(0x1, &(0x7f0000000380)='\x00')
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000)
mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil)
socket$netlink(0x10, 0x3, 0x12)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
read$FUSE(r3, &(0x7f0000005e40)={0x2020, 0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
write$FUSE_ATTR(r3, &(0x7f0000005340)={0x78, 0x0, r4, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7b, 0x9, 0x800, 0x6000, 0x2, r5, r6, 0xb, 0x8, 0x1000000}}}, 0x78)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001100010027bd7000fddbff250000000009"], 0x20}, 0x1, 0x0, 0x0, 0x8855}, 0x80)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004050000000000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES16=r1, @ANYRES16=r5, @ANYBLOB='\x00'/28], 0x48)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r9, 0x0, 0x0, 0x0, <r10=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r10, r8, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b002edd06f95bce46786fdf38000075000000000000000000000400000000", @ANYRESHEX=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0500"/28], 0x2f)
capset(&(0x7f0000000480)={0x19980330}, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x89, 0xfffffffb})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES64, @ANYBLOB="0000000000000000b702000014000000b7060000050000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff0000000065090000000000007baaf0ff00000000ad9900000000000007080000f8ffffffa400000000000007040000f0ffffffc7020000080000001826000000", @ANYRESDEC=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
getsockopt$inet_buf(r0, 0x118, 0x2, 0x0, &(0x7f00000003c0))
executing program 5:
syz_open_procfs(0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_pidfd_open(0x0, 0x0)
setns(r0, 0x8020000)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x2, 0x4}, &(0x7f0000000380)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_MSG_RING={0x28, 0x7b, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)="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", 0x600, 0x3, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089be, 0x1, 0x5, 0x248}, &(0x7f0000000240)=<r6=>0x0, &(0x7f0000000440)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000040)=0xffffdffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, 0x0, 0x0, 0x1e})
io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0)
setxattr(0x0, &(0x7f00000001c0)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0, 0x1)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000000000000000050006000900000005000200fc801800"], 0x3c}}, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r9, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000001c0)={'vcan0\x00'})
executing program 1:
socket$inet(0x2, 0x2, 0x1)
clock_adjtime(0x3, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x5)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0x0, 0x2, 0x1, "6e6a022b19e9a2f416fb109e2be58b281178b8d46c5d87ebcdba051ac8086181", 0x33363248})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
close(0xffffffffffffffff)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0xf0, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xb4, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ALLOWEDIPS={0x28, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0x2a, 0x0, "b25dd300350731437df94f0a338977934d6951cdd6c61e31cc7172c856b141e3f4e87e6ab615ea379a12c5a6f5c6e8b30138f5f3570909f89f3e47f8090000c30a1c48cdff030000fad4624800"}, 0xd8)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
syz_emit_ethernet(0xd7, &(0x7f00000003c0)={@local, @random="e462e98700", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0xc9, 0x64, 0x0, 0x3, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x7, 0x0, 0xe7}, {"9537a46f78a8279dbbe3f5664b557be136b68e30d96ab68a95018ec57bc85d19f7f103383702974edc6b4fde0c3cbb5387c10d61cf29fd30870a8b79224d729f01b1682ed8b451b60726fb41f7b1dbefa523dcab4fbe181f67eacc89345c3b29cc296fe1dfdece7c9da77a5b419b12ca738deb6af4571e483db7ca5d2636ab9c14a84c8e4d8455adca1eec05ce1803bc5141b2d5b740c8c0616b0e98c628cd848f"}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$unix(0x1, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23002abd7000fcdbdf2501000000000000000c410000000c0014197588c0105e40df"], 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x4040050)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
executing program 6:
prlimit64(0x0, 0xe, 0x0, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) (async, rerun: 32)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) (async)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x101542, 0x0) (async)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000010}) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10)
setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f00000009c0)=0x1234, 0x4)
executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xcb}, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000080)=0x1c)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, 0x0, 0x0, 0x40800)
recvmsg$qrtr(r1, 0x0, 0x0, 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x6a, 0x3, 0x0, &(0x7f0000000180))
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009050a", @ANYRES16], 0x0)
syz_usb_ep_read(r5, 0xa, 0x0, 0x0)
setns(r4, 0x24020000)
mount$9p_xen(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x44000, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x8, 0x3, 0x4})
executing program 4:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
chdir(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x71, r2}, 0x38)
unshare(0x66000080) (fail_nth: 1)
syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c83010203010902"], 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/18, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYBLOB="9b00000000000000070000faffffff", @ANYRES32=0x0, @ANYRES32, @ANYRES16=r0], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000000c0)=[@dead_binder_done, @free_buffer], 0x11, 0x0, &(0x7f0000000140)="7497c6a6b8c09e2112877e76c941c9c499"})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r5, &(0x7f0000000380), &(0x7f0000000400)=""/236}, 0x20)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_PIT2(r7, 0x4070aea0, &(0x7f0000000040)={[{0x2, 0x1, 0x81, 0x7f, 0x6, 0x7, 0x1, 0x7f, 0x7, 0x5, 0x7f, 0x92, 0x80000}, {0x8ab, 0x0, 0x1, 0x40, 0x7, 0x9, 0x8, 0xfa, 0x0, 0x6d, 0x6, 0x9, 0xa32}, {0x5, 0x6, 0x78, 0xa1, 0xd, 0x8, 0x6, 0x1, 0x1, 0x5, 0x1, 0xff, 0x7}], 0x7})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
executing program 1:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
chdir(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x71, r2}, 0x38)
unshare(0x66000080)
syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c83010203010902"], 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/18, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYBLOB="9b00000000000000070000faffffff", @ANYRES32=0x0, @ANYRES32, @ANYRES16=r0], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000000c0)=[@dead_binder_done, @free_buffer], 0x11, 0x0, &(0x7f0000000140)="7497c6a6b8c09e2112877e76c941c9c499"})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r5, &(0x7f0000000380), &(0x7f0000000400)=""/236}, 0x20)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_PIT2(r7, 0x4070aea0, &(0x7f0000000040)={[{0x2, 0x1, 0x81, 0x7f, 0x6, 0x7, 0x1, 0x7f, 0x7, 0x5, 0x7f, 0x92, 0x80000}, {0x8ab, 0x0, 0x1, 0x40, 0x7, 0x9, 0x8, 0xfa, 0x0, 0x6d, 0x6, 0x9, 0xa32}, {0x5, 0x6, 0x78, 0xa1, 0xd, 0x8, 0x6, 0x1, 0x1, 0x5, 0x1, 0xff, 0x7}], 0x7})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000300)={@loopback, <r2=>0x0}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100850}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@ipv4_newaddr={0x3c, 0x14, 0x100, 0x70bd2a, 0x25dfdbfd, {0x2, 0x38, 0x10, 0xff, r2}, [@IFA_LABEL={0x14, 0x3, 'pimreg1\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3ff}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x4d)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x69}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100009060000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r11, @ANYBLOB], 0x44}}, 0x0)
r12 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r13], 0x5c}}, 0x40)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902120001000000000904"], 0x0)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x176)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) (fail_nth: 11)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)
executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="34000000000803000000000000000000000000000900010073797e30000000000600024088a800000500030001000000040004"], 0x34}}, 0x800)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="b00000000208010200000000000000000500000109000100"], 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x45, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x6081}, 0x4020881)
executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0x8, 0x7, 0x66, 0x5}, {0x2, 0xf, 0x9, 0xca5}, {0x5, 0x8, 0xc, 0x7}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x3a85ef35342a412e)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xceca, 0x1c800, 0x2, 0x25f})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x800005, 0x6a], 0x1, 0x1000d6})
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, &(0x7f0000000000)=@add_del={0x2, 0x0})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x95}, 0x1c)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
madvise(&(0x7f0000c46000/0x3000)=nil, 0x3000, 0xa)
munmap(&(0x7f000026a000/0x12000)=nil, 0x12000)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
membarrier(0x2, 0x0)
executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x176)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0xf00, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)
executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="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", 0xfd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c", 0x3d}, {&(0x7f0000000a40)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506", 0x2}], 0x1}}], 0x3, 0x11)
r1 = accept4(r0, 0x0, 0x0, 0x800)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f00000007c0), 0x800, 0x0)
write$dsp(r2, &(0x7f0000000800)="a8209ba6", 0x4)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x492492492492846, 0x0)
connect$unix(r4, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$sock_bt_hci(r3, 0x800448d3, &(0x7f0000000080)="dcd7c1d5f0bf09399a7f39de26d0f7709fba56f5951f1432d6e06bd8336d47cee11f707bd8761b5bc1527cb03853d30479041476cd09d29d4f2573b7b7bd2222ac63f7cc54e7")
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff00"/43], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan1\x00'})
executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000017c0), r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x76, 0x0, 0x0)
socket$inet6(0xa, 0xa, 0x108000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0)
ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x3, &(0x7f0000000580)=[0x21, 0x8004, 0x1, 0x4, 0x9, 0x1ed, 0x2, 0x2, 0xbb, 0xc58f, 0x2060, 0xfed, 0xfffffffa, 0x1ac, 0xfffffff8], 0x0, 0x2})
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8)
r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000080)={0x5, 0x2, 0x1, "6705f8a090b30f40032abcd30cfaa74ed04eafba2a466ae693f6e48e9ae4bba7", 0x32314d54})
syz_open_dev$sg(0x0, 0xa, 0x241)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0x80)
r5 = socket$inet(0x2, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f000000c000/0x3000)=nil, &(0x7f000000d000/0x1000)=nil, 0x3000, 0x3})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x0, 0x0, 0x0, 0x8, 0x36, &(0x7f0000000c00)=""/54, 0x41000, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000e00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000e40)=[{0x126f2af, 0x5, 0x2, 0x9}, {0x1, 0x3, 0x6, 0x9}], 0x10, 0x5}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000004d00)=@newqdisc={0x148, 0x24, 0xf0b, 0x1000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfffe}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x9, 0x3, 0x488f, 0x16, 0xf, 0x7}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={0x0, r2, 0x4000, r3}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x404c054)
openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
executing program 5:
socket$inet(0x2, 0x2, 0x1)
clock_adjtime(0x3, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x5)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0x0, 0x2, 0x1, "6e6a022b19e9a2f416fb109e2be58b281178b8d46c5d87ebcdba051ac8086181", 0x33363248})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
close(0xffffffffffffffff)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0xf0, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xb4, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ALLOWEDIPS={0x28, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000017c0), r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x76, 0x0, 0x0)
socket$inet6(0xa, 0xa, 0x108000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0)
ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x3, &(0x7f0000000580)=[0x21, 0x8004, 0x1, 0x4, 0x9, 0x1ed, 0x2, 0x2, 0xbb, 0xc58f, 0x2060, 0xfed, 0xfffffffa, 0x1ac, 0xfffffff8], 0x0, 0x2})
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8)
syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0x80)
r4 = socket$inet(0x2, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f000000c000/0x3000)=nil, &(0x7f000000d000/0x1000)=nil, 0x3000, 0x3})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x0, 0x0, 0x0, 0x8, 0x36, &(0x7f0000000c00)=""/54, 0x41000, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000e00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000e40)=[{0x126f2af, 0x5, 0x2, 0x9}, {0x1, 0x3, 0x6, 0x9}], 0x10, 0x5}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000004d00)=@newqdisc={0x148, 0x24, 0xf0b, 0x1000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfffe}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x9, 0x3, 0x488f, 0x16, 0xf, 0x7}}, @TCA_RED_STAB={0x104, 0x2, "8b5d92b27abf1ca08736186ed37d549dbfc3691ec2aa55be5c67b16e00063e342bdf6ce2208d212a5f719bcfd0e81681864328a15ddc61b34da0f9007ee435f193a13a1a884ffd99547cd256559837e4203b1c69d9eaed6d8964a66d2e304c16b23dce7c17e2d9ad79fd50a10be5f82203e6e5ed280524c80d2177b42fb566a5f1fa86b2241b161d3dcb73b2b6c1c7cf7d873cd654db1c6fe576115f9383d7f8fa1f691b04e231ed2cd07335166cc1a27a2a1f64657db9fe3d156b304f44238fdaafae016234549a027f2617c7bfa22ee254c6f63be8109993837d1b18eaae58ad6994219690d819a71552e3f027449fc6aecd6403467495d5784f704964c31c"}]}}]}, 0x148}}, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={0x0, r2, 0x4000, r3}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x404c054)
openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
executing program 0:
socket$inet(0x2, 0x2, 0x1)
clock_adjtime(0x3, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r6, 0xffffffffffffffff, 0x0, 0x5)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0x0, 0x2, 0x1, "6e6a022b19e9a2f416fb109e2be58b281178b8d46c5d87ebcdba051ac8086181", 0x33363248})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
close(0xffffffffffffffff)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0xe0, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xb8, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
executing program 6:
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0xffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (fail_nth: 2)
executing program 5:
socket(0x2, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1)
preadv(r2, &(0x7f0000005280)=[{&(0x7f0000004280)=""/4096, 0x1000}], 0x1, 0x9, 0x6)
mount$tmpfs(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB])
r3 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd)
quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000700, 0x0, &(0x7f00000001c0))
ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000280)={0x1, 0x1, @raw_data=[0x8, 0x58, 0x1, 0x7, 0x1, 0xd, 0x1b8, 0x4, 0x82, 0x7, 0x5, 0x1, 0x100, 0x5, 0x766f275b, 0x9]})
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000061401"], 0x28}}, 0x20040080)
r5 = socket$inet6(0xa, 0x2, 0x0)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r6, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc)
syz_emit_vhci(&(0x7f0000009c40)=ANY=[], 0x17)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000140))
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2, @thr={0x0, 0x0}})
ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}})
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=@deltaction={0x1f4, 0x31, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x15d2}}, {0x10, 0x418, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x129}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x56}}]}, @TCA_ACT_TAB={0x4}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x801}, 0x8001)
openat$audio1(0xffffffffffffff9c, 0x0, 0x40, 0x0)
mremap(&(0x7f000000d000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000ffb000/0x3000)=nil)
executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000009440)=<r2=>0x0)
bind$nfc_llcp(r1, &(0x7f0000009480)={0x27, r2, 0xffffffffffffffff, 0x5, 0x1, 0x6, "be8e19b6a865e7ab561f559d74a73485c8abd6554271850320b9571ca0d8f47c1e1a12c085d196fd2eb6853571e830e500", 0x30}, 0x60)
syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100153a48e08f00a71729188010203010902240001060000000904000002ffffff0009050b0000000000000905ec"], 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) (async)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000009440)) (async)
bind$nfc_llcp(r1, &(0x7f0000009480)={0x27, r2, 0xffffffffffffffff, 0x5, 0x1, 0x6, "be8e19b6a865e7ab561f559d74a73485c8abd6554271850320b9571ca0d8f47c1e1a12c085d196fd2eb6853571e830e500", 0x30}, 0x60) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100153a48e08f00a71729188010203010902240001060000000904000002ffffff0009050b0000000000000905ec"], 0x0) (async)
executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4850}, 0x8000)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8000, 0x4f}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24004804}, 0x800)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008000)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r8, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r9 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r9, &(0x7f0000002700)=""/102392, 0x18ff8)
r10 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0)
mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002000010027bd70000009000002000000000000070000000014000200fe800000000000000000000000000101080018004e234e23"], 0x38}, 0x1, 0x0, 0x0, 0x24048844}, 0x0)
executing program 5:
r0 = socket(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x10100, 0x139)
faccessat2(r4, &(0x7f0000000200)='./file0\x00', 0x88, 0x100)
r5 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044060}, 0x40000)
socket$netlink(0x10, 0x3, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xaa100, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB])
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48)
r10 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$sock_linger(r10, 0x1, 0x3c, 0x0, 0x0)
sendmmsg$inet6(r10, &(0x7f0000003cc0)=[{{0x0, 0xe00, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000}})
executing program 6:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
link(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1)
getdents64(r0, &(0x7f00000007c0)=""/85, 0x55)
executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
fsopen(0x0, 0x1)
openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x43)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x8, <r4=>r0, 0x80000})
connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-link-openat$dir-getdents64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
link(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1)
getdents64(r0, &(0x7f00000007c0)=""/85, 0x55)

program did not crash
single: failed to extract reproducer
bisect: bisecting 44 programs with base timeout 1m40s
testing program (duration=1m51s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30, 24, 19, 26, 30, 30, 15, 28, 30, 15, 26, 15, 15, 29, 4, 29, 30, 10, 30, 25, 28, 16, 15, 28, 27, 27, 28, 17, 5, 22, 17, 25, 29, 28, 28, 29, 3, 29, 10, 30, 28, 6, 19]
detailed listing:
executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = syz_open_dev$video4linux(&(0x7f0000001e00), 0x0, 0x0)
getpid()
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
move_pages(r3, 0x0, 0x0, 0x0, 0x0, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmctl$IPC_STAT(0x0, 0x2, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x88200)
r6 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r6, 0x0, 0x0)
r7 = fsopen(&(0x7f0000000100)='zonefs\x00', 0x1)
r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f0000000500)={0x0, &(0x7f0000000280)})
ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000040)={0x200, 0x0, 0x0, &(0x7f00000003c0)=[0x7], &(0x7f00000000c0)=[0x0], &(0x7f0000000180)=[0x31], 0x0, 0xff})
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getpgid(0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0xe348, 0x11, 0x201a, 0x80001, 0x0, 0x40000, 0x1})
getsockopt$inet_int(r0, 0x0, 0x33, 0x0, &(0x7f0000000080))
executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3ff, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000180)=0x1)
r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2)
connect$unix(r4, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f00000004c0)}}, 0x40)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [""]}, 0x14}}, 0x84)
socket$inet(0x2, 0x2, 0x1)
r8 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'veth0_to_batadv\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2d, 0x4, 0x5, {0xb, @ah_ip6_spec={@ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0xb, 0x3}, {0x0, @empty, 0x9, 0x401, [0x1, 0x1]}, @usr_ip4_spec={@dev={0xac, 0x14, 0x14, 0x1d}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x4, 0x1, 0x94}, {0x0, @local, 0x2, 0x9, [0x100, 0x10]}, 0x102}, 0x2, [0x9000, 0x0]}})
ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x84}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1}, 0x9}], 0x1, 0x2, 0x0)
executing program 2:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x8, &(0x7f0000000040))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/slabinfo\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)
close(r0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000000)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
listen(r4, 0xa)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x452280, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x102001, 0x0)
r6 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0x22, &(0x7f0000000080)=0x5, 0x4)
ioctl$TIOCGPTPEER(r5, 0x5441, 0xb3d)
ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r1, 0x7b3, &(0x7f0000000240))
executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f000905e702100000fa00090582"], 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884)
r2 = socket(0x400000000010, 0x3, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r4, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4c13e67f, 0x5}}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1fa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000740000/0x1000)=nil, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x70, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffd}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x2c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x5, 0x40}}}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="c2fd291f", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x8]}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4040054)
executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0)
sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x84, r6, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1a}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x5}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r7, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
r8 = dup(r7)
write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18)
write$FUSE_INIT(r8, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50)
r9 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r9, &(0x7f0000003800)={0x2020}, 0x2020)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x28, r1, 0x1, 0x70bd28, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80080}, 0x24000000)
executing program 2:
r0 = syz_usb_connect$uac1(0x0, 0x7f, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000000002b406b1d010140000102030109026d0003010070000904000000010100000a24010040000201020904010000010200000904010101010200000905010920000030000725010000000009040200000102000009040201010102000007240100f90300072401210000000905820910000000080725018100000065a7253045e735abb2e673b3517334e08dd149e80f3a4aed05eddbdcbf08424728031957261064c2c19a2764a9e6ed4a6097f8639aac3862d2de4aafe2b436acb2f65c0ac60053d8e1be0236f90a1e315ae609ccf9de0dcdef1a3d79c4"], 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000300)='syzkaller\x00'}, 0x94)
r2 = syz_usb_connect(0x0, 0xb16, &(0x7f0000002200)={{0x12, 0x1, 0x0, 0x38, 0x7b, 0x79, 0xff, 0x19d2, 0xffc0, 0x3112, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb04, 0x4, 0x1, 0x7, 0x70, 0x2, [{{0x9, 0x4, 0xaf, 0x7, 0x6, 0xff, 0xff, 0xff, 0x3, [@generic={0x1e, 0xe, "aec5f6801e8ba2811e8a362bd4bc695ca509067b666fd02f95ea3ffa"}], [{{0x9, 0x5, 0xa, 0x18, 0x8, 0x4, 0x3, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xb1}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xe, 0x4, 0x5, [@generic={0x3d, 0x27, "53f604d497ddcdad55a5ad725051c7a3ca436d08eba505fb2e572ee5daa3ac7f9b1167e2efc634500cfe375f58ed97ff3177f38aad0ee228841b93"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x20, 0xfc, 0x5, 0x64, [@generic={0x101, 0x7, "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"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x1e, 0xee, 0xf, [@generic={0xdd, 0xe, "5e46c6252d61eef0544ca18e73591d0d135286963f00ecb471e71d2acb2311469db7d1b0d22686053d2a9fb052d60cff3159fda78f09196e506e259534287ec7c22f5dc0776f7fc6a475389576f9f010ed18bdd8292585df52419f6b2696a391b7d7d82e2f0732643dae2c68183dab90df87609d3971b67c063bbdacea8af069383204736473439c76f1000e82e8fabb841f32cf50c9ae5e780f4591b2e2ca8752271969e60119263e679617a8ecae02bb4c65b8acc817b157969a3644d4977ae353aa93d63bbaf7038946fa27c49377930db7aaa20fb951a94b9c"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x8, 0xb, 0xf, [@generic={0x79, 0x21, "4492a0c2f2e28df80f8ce6f28f29b9c5ea07c6049391302e95dee7239cdcc9ad5cd954e6895e9ae88165f326c86d95b2ca17886e78521a0d07ddd890bc78d44dded56454d8aa968126d284fa6fe87eef6786a2af737b7822e796a5f07f1a581b277fb9ef360345b799eee6a6ea2cfeff34d3c15ac6c6f2"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0x6, 0x88, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x37, 0x4}, @generic={0x100, 0x23, "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"}]}}]}}, {{0x9, 0x4, 0x8c, 0x27, 0x5, 0xc7, 0xc2, 0x9d, 0x9, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 'C'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x6, 0x8, 0xf6}, [@ncm={0x6, 0x24, 0x1a, 0x4976, 0x2}]}, @generic={0x49, 0x9, "dc4eabe46088dfc03f026ac39e6a6c9db81b4f180ed456c1f9b3fb6e6d113e3af8c970d516bce0fbf457978d1a3b700e45933a437fbfa9a1c2533f48f39bb6813b7504668c0a91"}], [{{0x9, 0x5, 0x8, 0x3, 0x40, 0x8, 0xf, 0x6, [@generic={0xa8, 0xe, "e9456dd496e657f1e7ae0edcbb05a84031b45c0fbf5bee961db603a867455c560b4784ad38803cf39b90ff01f3611909687f52596c9679350d2650f6386247cd5d539ab5c7a419948edc6bd3988adcb7f976604dbfd3e198a39a47086561bbdc8abeb9903c744a379d1b60c2f8b91d9fd4263d6c5a0aedd108658951a15311d80f2879583213794c0b5312a6f5754aeea112bb84c94107074478f7cebe5d8159d53c33d6a314"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3, 0xa, 0x0, [@generic={0xa4, 0x2, "bcdeed0a8845f9ea51f7cdddcee84b3e1262f99eff84a1dd10b17ecfee4ce4fc7fe52f4743b51456f46999489d999032c7fc2c6fa0fe4c6b51ce47227f2cfc830bb29b2a5b8feed9a34c3d1a3ce6e1d00b724b71750a6112d2893455e2b058e60308ed556fbe0b3b730de52a57ec9c17de7c371e16e3627b1f87a1346ae6ec7b885d32c48373d4a00f0e343ab44e32ddbb08163758dcc4f826ba3849af88c17a1502"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x2, 0x2, 0xd4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xd1, 0x3e}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x63, 0x7f}]}}, {{0x9, 0x5, 0x8, 0x4, 0x10, 0x0, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x26}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x8, 0x6, 0x4, [@generic={0x9f, 0x23, "9cfc0a533bf141f7b082c306a7d440670a654984dc2863f896da868d3e566812664002cb5c3cedaecf36cc3f02bf56b1eb485c15033b8a6fa7a97c2f5758e664d37a6108424a0b12f2dfe56034f7dde71dd8b8de5a04940592042ac070e6a13e7cd2d37945e0d25f2fd9485040e897c30d8ecc5126cd3a01430a557cc680ce5dc141b6099e645ac772667c363c3d6e21aa92b62ea414a070dbdff7bd1e"}]}}]}}, {{0x9, 0x4, 0x56, 0x3, 0x7, 0xd, 0xbb, 0xef, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x400, 0x4}, [@extension_unit={0x8, 0x24, 0x8, 0x2, 0x5, 0x9, "eb"}, @mixer_unit={0x5, 0x24, 0x4, 0x6, 0xb}, @input_terminal={0xc, 0x24, 0x2, 0x40, 0x202, 0x5, 0x2, 0x1ff, 0x4, 0x40}, @extension_unit={0xb, 0x24, 0x8, 0x2, 0x3, 0x80, "a9c17013"}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x5, 0x3, [0x1, 0x9, 0x4], 0x5}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0x9, 0x3}, {0x6, 0x24, 0x1a, 0x2b77}, [@mdlm_detail={0x27, 0x24, 0x13, 0x4, "70c038d225866b7cce7893180017c29cd79c13169489d1a9312744c44aa35e0d226502"}, @obex={0x5, 0x24, 0x15, 0xffff}, @mdlm={0x15, 0x24, 0x12, 0x8af4}, @country_functional={0xa, 0x24, 0x7, 0x5, 0x1000, [0x3, 0x1]}]}], [{{0x9, 0x5, 0x5, 0x1, 0x400, 0x2, 0x0, 0x23, [@generic={0xaa, 0x9, "601bbf9a76d6c7102ed605565fbca28c760b9a838d8b53d54b72ba983454819f34b7ebe60ee779da8631905853eba98ef69555e3a1d847d3e9b714ddfcb790c1212ae2cf230814bbdfcb922f8f1f53fef5cc8f2444f8a72378908453d3cc7d635498900316e031352bd7d7ed3bd28f98ed109205af92c8337816864f41c76ca69a83917eb0a22bedf152e93a9bd36469b10eb0f39abbf77011c84a0279dec554e1ab924f3ff70511"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0x81, 0x62, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0xd529}]}}, {{0x9, 0x5, 0x1, 0xc, 0x20, 0x3, 0xba, 0x5, [@generic={0x1d, 0x31, "60474ef02618bca165f7397b74bb307555cd842e805cde5fadcc86"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x20, 0x0, 0x3a, 0x1c, [@generic={0xc8, 0x7, "8e18ef3e295c06182308a67239ff9ef48059839d273d5f7d3bb222c5ab4ba82e6c76b745f9d5e8033819e0095b2320654968ade3289048de8b5c5d84e7e6af9fdcb8e6c55626b534aa7a809896bb11ffe87bf04494d47dcd4642e5db8f6787ca6af12f9cfdb529c62d7ae860259f2ef9ee641db76c47e107147a5936a08a433287826f5701371d13ed8988fb8e66ed7ceaab972db7d7b364f6c3316dd9889dc79132893cca96b091923a2ac1607d607430575982f04571f8ffc43fd80b4513fb03b8c4d84609"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x33}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0xa, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfd, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x80}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0xad, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x2}]}}, {{0x9, 0x5, 0x80, 0x0, 0x80121b764ecb90b2, 0xb, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x93, 0x12}]}}]}}, {{0x9, 0x4, 0x5e, 0x2, 0x8, 0xff, 0xff, 0x0, 0xca, [@uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xb, 0x2, 0x4, 0x98, "2fd288c322a2ea184a"}, @as_header={0x7, 0x24, 0x1, 0x10, 0xf, 0x1001}]}, @uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x40, 0x4, 0x33, 0x94, "2fa8", "4cb2"}, @as_header={0x7, 0x24, 0x1, 0xf, 0x7, 0x4}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x439, 0x72d, 0xff, "3391fe33f627efacf2"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x3}]}], [{{0x9, 0x5, 0xc, 0x0, 0x40, 0x1, 0xc, 0x30, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x86}]}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x5, 0x1, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xc3, 0x5}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0xfa, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x705}, @generic={0x73, 0x2, "bdc04541cf2b28639ebac85c783c08a8dff1acdbc1e3473293c91258dbdc44a4e112b6ea181105f14fc29eb929fdb48e28e774fee5567e2db87be4aa63baf4663a36bac86af11298ac136968a002b69be6f0daf0e3daf8d5eb567be2075f3f97985495f05cb8efb8935400a0d465ee9349"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x20, 0xea, 0xf0, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x6af}, @generic={0x35, 0x7, "11040fa0c5a6dd3557f2de1417524cd333aca88b39f59fae19edea0e9e722029b8e1cb6b168772d3f898a7a65e53743cb418e2"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x0, 0x9, 0xbd, 0x2c, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x62, 0x8001}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x8, 0xcb, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0x4}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x5, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0xf7, 0x42b3}, @generic={0x40, 0x31, "0d9d196072f78403c1ac4020a5095ea92cf4aafd06b17dbdecfbeaadf4d55162cb13dee4a4a70d034f12928bc03c899d39d4baa16f8bb1a2a7c6ed7c7369"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x400, 0x9, 0x3, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xfff7}]}}]}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x0, 0x3, 0x4, 0x10, 0xff, 0x9}, 0x58, &(0x7f0000000a80)=ANY=[@ANYBLOB="050f5800041c100a00e4ff1f000ff00600c03f00000f000000cf00ff00000000000710020c7940001410040266852951039f78cd77ee9475e30f45751c100a1a247700000f0030c1ed9d44b0f6efad94aa359e4b0309000fc08abb184828f4b2013102"], 0x6, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x42f}}, {0xf1, &(0x7f0000000400)=@string={0xf1, 0x3, "414ec9d690888b32a238d0691b12be23c8d0b9b0693b57c5678d148e0e071a772759580aebd9c9f4cc6a8a2b9e1c0e4e8defab1e6c5e4879330573f268dee47fd51da443e7f33ff93805de0a3cc3f5fd47ef823734c9737bcc8bbc9cce23a3d2a12208c908651c10927691184cccd59b644d6d945966b4af428d05af6260940c0ca8a8cd7647ed25a2c5eb3ae6c1bbb6e1948907e201f9947d7e6161db595ea6f6712974f564bdae47aad8a3979429c099a73168f72f6a5d2ab2b095151791b977a05dd17b4154d2999da79c452ebb54abbd70d2e490cf9ce4259ed02fc748f6f632a12335349f9af13d9634c6c4b6"}}, {0x10, &(0x7f0000000b40)=ANY=[]}]})
syz_usb_control_io$lan78xx(r2, &(0x7f0000000800)={0x14, &(0x7f0000000680)={0x20, 0x11, 0xdb, {0xdb, 0x21, "6f266fc694fa464b1d5511ba3974f25f6d89b1235996880c729685060293d2e46fd7c04a832e55a205a54d2f1285e20073e10aeb023505fb81ad573524aa398d031538cb0cb31aae1dd0c6e31f58a4e481dae14e38e712925ada89de0b4dc209da21b6b268d6c1e803b00306664f25465159db38bf951b58341ecaa25589a9e602abc52eb07aa25088ac97b170ace4d895e748567f358c188a3fb96c2cd915049ffbe92023f9768de347dbd941304e4b7421d0faf22d5a44662d6147424a35f3e55eeb9f567cda0f824ae4fdb7ad931c64776bc9c52d44ff29"}}, &(0x7f0000000780)={0x0, 0x3, 0x68, @string={0x68, 0x3, "fd464f6be80f06221b8f9ad43f912dfa766d4ff964c9a245768dd37f66c058dedca0b3e141b8ac9d421bd7f3a5e756709ce5511d1c4a8e899d81686845566f1dab2ca95f30ce0f8dff3bf144fdc0f16a2ce0a681b69acbdd2e84b9b577ee202bd4895e0ed754"}}}, &(0x7f0000000a40)={0x34, &(0x7f0000000840)={0x20, 0xf, 0xa8, "8ca06a6e458484c9308eeaacf011544dbd32a7b6c6fba1a162f4000665a6cdf4b3ebaa7fd260ed861fbe529355fa44b3b0a1556cc5090ec013034a78732deccdf5eabf67b658ad8c4ca194f8602f1b0d5e5bc3220bf128e7aee38c0e4fe1de0c0418f9b2998b8ed9af1c773e8e9ee2a5dad5803c7f3209a6c6c26d54ebf203692c4c11421b6814f643059adf4b369afe65710047448fa6db836229a74fbf713cb4289756b0fbbe26"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0xbb}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000980)={0xc0, 0xa1, 0x4, 0x6f20}, &(0x7f00000009c0)={0x40, 0xa0, 0x4, 0x10}, &(0x7f0000000a00)={0xc0, 0xa2, 0x2f, "fa9214e16fc9e2ecb82fb3276eb02fb03b4ca2bfce62deffcabf4d243402b6fa09a2e9d616fff91f55b0d6d5668789"}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0xa883, 0x92)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}})
ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x6)
r5 = socket$netlink(0x10, 0x3, 0xa)
dup(r5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b80)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
prctl$PR_SET_PTRACER(0x59616d61, r6)
connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
socket$kcm(0xa, 0x922000000003, 0x11)
executing program 32:
r0 = syz_usb_connect$uac1(0x0, 0x7f, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000000002b406b1d010140000102030109026d0003010070000904000000010100000a24010040000201020904010000010200000904010101010200000905010920000030000725010000000009040200000102000009040201010102000007240100f90300072401210000000905820910000000080725018100000065a7253045e735abb2e673b3517334e08dd149e80f3a4aed05eddbdcbf08424728031957261064c2c19a2764a9e6ed4a6097f8639aac3862d2de4aafe2b436acb2f65c0ac60053d8e1be0236f90a1e315ae609ccf9de0dcdef1a3d79c4"], 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000300)='syzkaller\x00'}, 0x94)
r2 = syz_usb_connect(0x0, 0xb16, &(0x7f0000002200)={{0x12, 0x1, 0x0, 0x38, 0x7b, 0x79, 0xff, 0x19d2, 0xffc0, 0x3112, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb04, 0x4, 0x1, 0x7, 0x70, 0x2, [{{0x9, 0x4, 0xaf, 0x7, 0x6, 0xff, 0xff, 0xff, 0x3, [@generic={0x1e, 0xe, "aec5f6801e8ba2811e8a362bd4bc695ca509067b666fd02f95ea3ffa"}], [{{0x9, 0x5, 0xa, 0x18, 0x8, 0x4, 0x3, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xb1}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xe, 0x4, 0x5, [@generic={0x3d, 0x27, "53f604d497ddcdad55a5ad725051c7a3ca436d08eba505fb2e572ee5daa3ac7f9b1167e2efc634500cfe375f58ed97ff3177f38aad0ee228841b93"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x20, 0xfc, 0x5, 0x64, [@generic={0x101, 0x7, "c9b543a71eaeb43636878ee8500cf57e39637b447aa862d8432a9b4545ad7acf4508548639602cbf61b1a67139b9c72146c3f90f154503434de5d4912fbecdc24f1225b6e9d18c861ec69a27ba668509b1bb48832e9803addb3c026169fa2d41ef88c41f0b55d59ff8296af8e1a906f93dd0231535fac1e7285b32ce27b4a1c2930e1841281d0a90b33422be66f1b86f62ba9360de2c5e1e246d6912edad03c1a5f04a9e9982ab7771b50d6e7467f7ad99f3a5ba7f3abd32458d9bae3fa4b30dacb430b3c6c736882ee59fff0145adb6b446e28ea77aae5e3a19a0d6f3ff49412a7d148096dbc1d1a273730856ac0ae5b9cb7eeefc434a01d4cea8e2ca224a"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x1e, 0xee, 0xf, [@generic={0xdd, 0xe, "5e46c6252d61eef0544ca18e73591d0d135286963f00ecb471e71d2acb2311469db7d1b0d22686053d2a9fb052d60cff3159fda78f09196e506e259534287ec7c22f5dc0776f7fc6a475389576f9f010ed18bdd8292585df52419f6b2696a391b7d7d82e2f0732643dae2c68183dab90df87609d3971b67c063bbdacea8af069383204736473439c76f1000e82e8fabb841f32cf50c9ae5e780f4591b2e2ca8752271969e60119263e679617a8ecae02bb4c65b8acc817b157969a3644d4977ae353aa93d63bbaf7038946fa27c49377930db7aaa20fb951a94b9c"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x8, 0xb, 0xf, [@generic={0x79, 0x21, "4492a0c2f2e28df80f8ce6f28f29b9c5ea07c6049391302e95dee7239cdcc9ad5cd954e6895e9ae88165f326c86d95b2ca17886e78521a0d07ddd890bc78d44dded56454d8aa968126d284fa6fe87eef6786a2af737b7822e796a5f07f1a581b277fb9ef360345b799eee6a6ea2cfeff34d3c15ac6c6f2"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0x6, 0x88, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x37, 0x4}, @generic={0x100, 0x23, "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"}]}}]}}, {{0x9, 0x4, 0x8c, 0x27, 0x5, 0xc7, 0xc2, 0x9d, 0x9, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 'C'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x6, 0x8, 0xf6}, [@ncm={0x6, 0x24, 0x1a, 0x4976, 0x2}]}, @generic={0x49, 0x9, "dc4eabe46088dfc03f026ac39e6a6c9db81b4f180ed456c1f9b3fb6e6d113e3af8c970d516bce0fbf457978d1a3b700e45933a437fbfa9a1c2533f48f39bb6813b7504668c0a91"}], [{{0x9, 0x5, 0x8, 0x3, 0x40, 0x8, 0xf, 0x6, [@generic={0xa8, 0xe, "e9456dd496e657f1e7ae0edcbb05a84031b45c0fbf5bee961db603a867455c560b4784ad38803cf39b90ff01f3611909687f52596c9679350d2650f6386247cd5d539ab5c7a419948edc6bd3988adcb7f976604dbfd3e198a39a47086561bbdc8abeb9903c744a379d1b60c2f8b91d9fd4263d6c5a0aedd108658951a15311d80f2879583213794c0b5312a6f5754aeea112bb84c94107074478f7cebe5d8159d53c33d6a314"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3, 0xa, 0x0, [@generic={0xa4, 0x2, "bcdeed0a8845f9ea51f7cdddcee84b3e1262f99eff84a1dd10b17ecfee4ce4fc7fe52f4743b51456f46999489d999032c7fc2c6fa0fe4c6b51ce47227f2cfc830bb29b2a5b8feed9a34c3d1a3ce6e1d00b724b71750a6112d2893455e2b058e60308ed556fbe0b3b730de52a57ec9c17de7c371e16e3627b1f87a1346ae6ec7b885d32c48373d4a00f0e343ab44e32ddbb08163758dcc4f826ba3849af88c17a1502"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x2, 0x2, 0xd4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xd1, 0x3e}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x63, 0x7f}]}}, {{0x9, 0x5, 0x8, 0x4, 0x10, 0x0, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x26}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x8, 0x6, 0x4, [@generic={0x9f, 0x23, "9cfc0a533bf141f7b082c306a7d440670a654984dc2863f896da868d3e566812664002cb5c3cedaecf36cc3f02bf56b1eb485c15033b8a6fa7a97c2f5758e664d37a6108424a0b12f2dfe56034f7dde71dd8b8de5a04940592042ac070e6a13e7cd2d37945e0d25f2fd9485040e897c30d8ecc5126cd3a01430a557cc680ce5dc141b6099e645ac772667c363c3d6e21aa92b62ea414a070dbdff7bd1e"}]}}]}}, {{0x9, 0x4, 0x56, 0x3, 0x7, 0xd, 0xbb, 0xef, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x400, 0x4}, [@extension_unit={0x8, 0x24, 0x8, 0x2, 0x5, 0x9, "eb"}, @mixer_unit={0x5, 0x24, 0x4, 0x6, 0xb}, @input_terminal={0xc, 0x24, 0x2, 0x40, 0x202, 0x5, 0x2, 0x1ff, 0x4, 0x40}, @extension_unit={0xb, 0x24, 0x8, 0x2, 0x3, 0x80, "a9c17013"}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x5, 0x3, [0x1, 0x9, 0x4], 0x5}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0x9, 0x3}, {0x6, 0x24, 0x1a, 0x2b77}, [@mdlm_detail={0x27, 0x24, 0x13, 0x4, "70c038d225866b7cce7893180017c29cd79c13169489d1a9312744c44aa35e0d226502"}, @obex={0x5, 0x24, 0x15, 0xffff}, @mdlm={0x15, 0x24, 0x12, 0x8af4}, @country_functional={0xa, 0x24, 0x7, 0x5, 0x1000, [0x3, 0x1]}]}], [{{0x9, 0x5, 0x5, 0x1, 0x400, 0x2, 0x0, 0x23, [@generic={0xaa, 0x9, "601bbf9a76d6c7102ed605565fbca28c760b9a838d8b53d54b72ba983454819f34b7ebe60ee779da8631905853eba98ef69555e3a1d847d3e9b714ddfcb790c1212ae2cf230814bbdfcb922f8f1f53fef5cc8f2444f8a72378908453d3cc7d635498900316e031352bd7d7ed3bd28f98ed109205af92c8337816864f41c76ca69a83917eb0a22bedf152e93a9bd36469b10eb0f39abbf77011c84a0279dec554e1ab924f3ff70511"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0x81, 0x62, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0xd529}]}}, {{0x9, 0x5, 0x1, 0xc, 0x20, 0x3, 0xba, 0x5, [@generic={0x1d, 0x31, "60474ef02618bca165f7397b74bb307555cd842e805cde5fadcc86"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x20, 0x0, 0x3a, 0x1c, [@generic={0xc8, 0x7, "8e18ef3e295c06182308a67239ff9ef48059839d273d5f7d3bb222c5ab4ba82e6c76b745f9d5e8033819e0095b2320654968ade3289048de8b5c5d84e7e6af9fdcb8e6c55626b534aa7a809896bb11ffe87bf04494d47dcd4642e5db8f6787ca6af12f9cfdb529c62d7ae860259f2ef9ee641db76c47e107147a5936a08a433287826f5701371d13ed8988fb8e66ed7ceaab972db7d7b364f6c3316dd9889dc79132893cca96b091923a2ac1607d607430575982f04571f8ffc43fd80b4513fb03b8c4d84609"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x33}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0xa, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfd, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x80}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0xad, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x2}]}}, {{0x9, 0x5, 0x80, 0x0, 0x80121b764ecb90b2, 0xb, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x93, 0x12}]}}]}}, {{0x9, 0x4, 0x5e, 0x2, 0x8, 0xff, 0xff, 0x0, 0xca, [@uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xb, 0x2, 0x4, 0x98, "2fd288c322a2ea184a"}, @as_header={0x7, 0x24, 0x1, 0x10, 0xf, 0x1001}]}, @uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x40, 0x4, 0x33, 0x94, "2fa8", "4cb2"}, @as_header={0x7, 0x24, 0x1, 0xf, 0x7, 0x4}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x439, 0x72d, 0xff, "3391fe33f627efacf2"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x3}]}], [{{0x9, 0x5, 0xc, 0x0, 0x40, 0x1, 0xc, 0x30, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x86}]}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x5, 0x1, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xc3, 0x5}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0xfa, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x705}, @generic={0x73, 0x2, "bdc04541cf2b28639ebac85c783c08a8dff1acdbc1e3473293c91258dbdc44a4e112b6ea181105f14fc29eb929fdb48e28e774fee5567e2db87be4aa63baf4663a36bac86af11298ac136968a002b69be6f0daf0e3daf8d5eb567be2075f3f97985495f05cb8efb8935400a0d465ee9349"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x20, 0xea, 0xf0, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x6af}, @generic={0x35, 0x7, "11040fa0c5a6dd3557f2de1417524cd333aca88b39f59fae19edea0e9e722029b8e1cb6b168772d3f898a7a65e53743cb418e2"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x0, 0x9, 0xbd, 0x2c, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x62, 0x8001}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x8, 0xcb, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0x4}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x5, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0xf7, 0x42b3}, @generic={0x40, 0x31, "0d9d196072f78403c1ac4020a5095ea92cf4aafd06b17dbdecfbeaadf4d55162cb13dee4a4a70d034f12928bc03c899d39d4baa16f8bb1a2a7c6ed7c7369"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x400, 0x9, 0x3, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xfff7}]}}]}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x0, 0x3, 0x4, 0x10, 0xff, 0x9}, 0x58, &(0x7f0000000a80)=ANY=[@ANYBLOB="050f5800041c100a00e4ff1f000ff00600c03f00000f000000cf00ff00000000000710020c7940001410040266852951039f78cd77ee9475e30f45751c100a1a247700000f0030c1ed9d44b0f6efad94aa359e4b0309000fc08abb184828f4b2013102"], 0x6, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x42f}}, {0xf1, &(0x7f0000000400)=@string={0xf1, 0x3, "414ec9d690888b32a238d0691b12be23c8d0b9b0693b57c5678d148e0e071a772759580aebd9c9f4cc6a8a2b9e1c0e4e8defab1e6c5e4879330573f268dee47fd51da443e7f33ff93805de0a3cc3f5fd47ef823734c9737bcc8bbc9cce23a3d2a12208c908651c10927691184cccd59b644d6d945966b4af428d05af6260940c0ca8a8cd7647ed25a2c5eb3ae6c1bbb6e1948907e201f9947d7e6161db595ea6f6712974f564bdae47aad8a3979429c099a73168f72f6a5d2ab2b095151791b977a05dd17b4154d2999da79c452ebb54abbd70d2e490cf9ce4259ed02fc748f6f632a12335349f9af13d9634c6c4b6"}}, {0x10, &(0x7f0000000b40)=ANY=[]}]})
syz_usb_control_io$lan78xx(r2, &(0x7f0000000800)={0x14, &(0x7f0000000680)={0x20, 0x11, 0xdb, {0xdb, 0x21, "6f266fc694fa464b1d5511ba3974f25f6d89b1235996880c729685060293d2e46fd7c04a832e55a205a54d2f1285e20073e10aeb023505fb81ad573524aa398d031538cb0cb31aae1dd0c6e31f58a4e481dae14e38e712925ada89de0b4dc209da21b6b268d6c1e803b00306664f25465159db38bf951b58341ecaa25589a9e602abc52eb07aa25088ac97b170ace4d895e748567f358c188a3fb96c2cd915049ffbe92023f9768de347dbd941304e4b7421d0faf22d5a44662d6147424a35f3e55eeb9f567cda0f824ae4fdb7ad931c64776bc9c52d44ff29"}}, &(0x7f0000000780)={0x0, 0x3, 0x68, @string={0x68, 0x3, "fd464f6be80f06221b8f9ad43f912dfa766d4ff964c9a245768dd37f66c058dedca0b3e141b8ac9d421bd7f3a5e756709ce5511d1c4a8e899d81686845566f1dab2ca95f30ce0f8dff3bf144fdc0f16a2ce0a681b69acbdd2e84b9b577ee202bd4895e0ed754"}}}, &(0x7f0000000a40)={0x34, &(0x7f0000000840)={0x20, 0xf, 0xa8, "8ca06a6e458484c9308eeaacf011544dbd32a7b6c6fba1a162f4000665a6cdf4b3ebaa7fd260ed861fbe529355fa44b3b0a1556cc5090ec013034a78732deccdf5eabf67b658ad8c4ca194f8602f1b0d5e5bc3220bf128e7aee38c0e4fe1de0c0418f9b2998b8ed9af1c773e8e9ee2a5dad5803c7f3209a6c6c26d54ebf203692c4c11421b6814f643059adf4b369afe65710047448fa6db836229a74fbf713cb4289756b0fbbe26"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0xbb}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000980)={0xc0, 0xa1, 0x4, 0x6f20}, &(0x7f00000009c0)={0x40, 0xa0, 0x4, 0x10}, &(0x7f0000000a00)={0xc0, 0xa2, 0x2f, "fa9214e16fc9e2ecb82fb3276eb02fb03b4ca2bfce62deffcabf4d243402b6fa09a2e9d616fff91f55b0d6d5668789"}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0xa883, 0x92)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}})
ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x6)
r5 = socket$netlink(0x10, 0x3, 0xa)
dup(r5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b80)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
prctl$PR_SET_PTRACER(0x59616d61, r6)
connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
socket$kcm(0xa, 0x922000000003, 0x11)
executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000c00)="f4"}, 0x20)
keyctl$dh_compute(0x17, &(0x7f0000001200), 0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={'hmac(streebog512)\x00'}})
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
syz_usb_connect$cdc_ncm(0x7, 0xd2, &(0x7f0000001680)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x2, 0x1, 0x7f, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "e82e68"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xf474, 0xe, 0x3ff, 0x5}, {0x6, 0x24, 0x1a, 0x0, 0x20}, [@mbim_extended={0x8, 0x24, 0x1c, 0x59b0, 0xe, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0xff, 0x9, 0x8, 0x5}, @mdlm_detail={0x1c, 0x24, 0x13, 0x6, "4a501bbf529c35344fa1b5321a7f2e773973be0f9fb2596e"}, @mdlm={0x15, 0x24, 0x12, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x7, 0x6, 0x3, 0x100, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x200}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x19, 0x7, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x65, 0x5, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x8, 0x8}}}}}}}]}}, &(0x7f0000001780)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x49, 0x9, 0xe7, 0x10}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x3, [{0x30, &(0x7f0000000280)=@string={0x30, 0x3, "459e98bed5789ac37d252cc67edbbc23c749297a5e0df5ce4f39fda26762d06879ae2019216c6a052a370685f140"}}, {0x77, &(0x7f0000000440)=@string={0x77, 0x3, "59fdce2c502919fdbb717b60ff2d34ddc8dc32d458ef204335ee17ecb80298a6e9131c09984945981f1122332bfb8b7d6da78d1c1c8487de21d43c582943e1444492ea8eecd28c4ae0f538ab51742d6f13f76a3e343cb55646aa3feb6783ce60292e050ecd77f651ef6424f886ef095fce09d0801f"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x43e}}]})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0)
sendfile(r2, r2, &(0x7f0000000080), 0x7f03)
utimes(&(0x7f0000000400)='.\x00', &(0x7f0000000500)={{0x0, 0x2710}})
r3 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97)
getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8)
r4 = io_uring_setup(0x2e01, &(0x7f0000000040)={0x0, 0xafd2, 0x1000, 0x2, 0x2ca})
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000540)=[{0x0}], 0x1)
r5 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x28e, 0x0, r4})
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x6, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000180)={{0x0, 0x80}, {0xfffffffffffffff7, 0x1}, 0x1bb, 0x1})
ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000000680)={[0xfffffbff, 0x80, 0x8001, 0xe3, 0x1, 0x9, 0x6, 0x0, 0x5, 0xe00, 0x874d, 0x2, 0x3d9092bd, 0x8, 0x9, 0x9, 0x8, 0x2, 0x4, 0x7f, 0x4, 0x0, 0x9, 0x8, 0x6, 0x1, 0x0, 0x400, 0x4, 0x885, 0xffffffbc, 0x1, 0x8, 0xffff, 0x8, 0x0, 0x32, 0x0, 0x4, 0x3, 0xba, 0x2, 0x7, 0x6, 0xe7, 0x6, 0x9, 0xb, 0x5, 0x4, 0x3, 0x7b, 0x1ff, 0x4, 0x0, 0x6, 0x361, 0x0, 0x40, 0x4a, 0x3, 0x8, 0x66, 0xff, 0x3, 0x8, 0x7, 0x2, 0x7, 0x4, 0x36, 0xfb2, 0x2, 0x3, 0x4, 0xaa, 0x9480, 0x36b1, 0x1, 0x4, 0xc40f, 0x5, 0x4, 0x0, 0x0, 0x8, 0x80000000, 0x3, 0x40, 0x6, 0x4, 0x6, 0x9, 0x2, 0x1, 0x0, 0x4, 0x7, 0x341a, 0x3, 0x81, 0x6, 0x7, 0x10001, 0xfffffff8, 0x43, 0x0, 0x40, 0x81, 0x2, 0x94, 0x3, 0x1000, 0x1, 0x9, 0xa, 0x5, 0x80000001, 0x2, 0x4, 0x35, 0x0, 0x0, 0x46, 0x45bb, 0x9, 0x1, 0xd, 0x3, 0x3, 0x5, 0x6, 0x9, 0x3726, 0x3, 0x8, 0x1, 0x5623, 0x3503, 0x8000, 0x5, 0x10, 0x6, 0x7, 0x5, 0x4, 0x3, 0x6, 0xffffff20, 0x6, 0x40, 0x1, 0x7ff, 0x1, 0x7, 0x6, 0x4, 0x3, 0x401, 0x3fd, 0x4, 0x0, 0xfff, 0xcf, 0x60d, 0x5, 0xe, 0x70a, 0x4, 0x1, 0x5, 0xe98, 0x5a253222, 0x1, 0x9c, 0xcb, 0x3, 0x1000, 0x200, 0x2, 0x101, 0x7, 0x1, 0x743, 0x5, 0x4, 0x1, 0x5, 0x6, 0x2, 0x9, 0x1, 0x2, 0x80000, 0x6, 0xa48, 0x5575d5eb, 0xe, 0x4, 0x3, 0x7, 0x8000, 0x8, 0x9, 0x5, 0x7fffffff, 0x401, 0x8001, 0x2, 0x9, 0x9, 0xfffffffc, 0x2, 0x8, 0xc05, 0x56, 0x7, 0xfffffffd, 0x40, 0x0, 0x6, 0x1, 0x4, 0x4, 0x1, 0x80000001, 0x5, 0x1c91e0, 0x800, 0x0, 0x7, 0x1, 0x5, 0x5, 0x7, 0x1000, 0x6, 0xfe0000, 0x8, 0x328, 0xa3, 0x800, 0x8, 0x8, 0x9, 0x5, 0x5, 0x8, 0x8, 0xd45, 0x5, 0x0, 0x6, 0x3, 0x2, 0x7, 0xdd9, 0xfffffff8, 0x101, 0xcd, 0x400000, 0x3ff, 0x7, 0x17b8, 0x6, 0x3, 0x1, 0xc, 0xfff, 0x7, 0x7fffffff, 0x9, 0xfffffff7, 0x5, 0xfff, 0x9, 0xd40b, 0xffffffff, 0x2, 0xfffff54a, 0x4, 0x80000000, 0x1, 0xffffb812, 0xda3, 0xab9, 0x3, 0x5, 0x9, 0x600, 0x51be, 0x200, 0x2, 0x1, 0x6, 0xfffffffe, 0x1, 0x6, 0x90, 0x0, 0xc3c, 0x8, 0x0, 0x3, 0xffff, 0x3, 0x15, 0x9, 0x1000, 0x9, 0x0, 0x3, 0x1, 0x101, 0x4, 0x7fff, 0x10, 0x8, 0x10, 0x4, 0x81, 0x2, 0x6, 0xfffffff4, 0x3, 0x8, 0x2, 0xc, 0x6, 0xfffffffb, 0x3, 0xff, 0x1, 0x9, 0xdde0, 0xffff, 0x10001, 0xffff, 0x6, 0x4, 0x2, 0x80000000, 0x3, 0x8001, 0xa, 0xd4, 0x5, 0x2, 0xb, 0xfffffffb, 0xd, 0x4, 0x3a0, 0x5b8, 0x3, 0x8, 0x6, 0x9, 0xff, 0x8000, 0x4, 0xe12, 0x6, 0xffffff01, 0x4, 0xfdbf, 0x3, 0x6, 0x8, 0xfffffffb, 0x10000, 0x892c, 0x31b, 0xfffffff8, 0x7367, 0xfffffffb, 0x6, 0x8000, 0x80, 0x1, 0x8, 0x6, 0x4, 0x80, 0x5, 0x4, 0x0, 0xca, 0x6, 0x4, 0x4, 0x735, 0x10000, 0x6, 0x8, 0xffff0b69, 0x6, 0xb8c4, 0x8000, 0x8, 0x0, 0xe, 0x6, 0x4, 0x9, 0x7fff, 0x42, 0xcf2b, 0xfffffffc, 0x2, 0x0, 0x49fa, 0xb549, 0xffff, 0x2de, 0x1, 0x2a3f, 0x3080, 0x7fffffff, 0x0, 0x2, 0x5b, 0x8, 0x2, 0xd, 0x7fff, 0x41a0000, 0x1ff, 0x2d, 0x8f0b, 0x5, 0x8000, 0x2, 0x7, 0x86, 0x10001, 0x34, 0xf57, 0xfffffff5, 0x6bff, 0x6, 0x6, 0x7, 0xfff, 0xc, 0x48, 0x81, 0x9, 0x3, 0x10000000, 0x3, 0x9, 0x3, 0x7, 0x8, 0xa, 0x4, 0x30000000, 0x5, 0x38, 0x7, 0x1, 0xfffffff9, 0x7, 0x8, 0xd2, 0x3ff, 0xc96, 0x4, 0x4, 0xe0, 0x10, 0x4, 0x101, 0x100, 0x1, 0xff, 0x7f, 0x6, 0x6, 0x16f1c, 0x6d, 0xffff617b, 0x0, 0x8, 0x5, 0x1e, 0xffffffff, 0x2, 0x60, 0xff, 0xfffffffd, 0x0, 0x4, 0xd1, 0xff, 0x9, 0x1, 0xfffff000, 0x3, 0xffffffff, 0xa, 0x0, 0xfffffff9, 0x0, 0x4, 0x9, 0x6, 0x8, 0x6, 0x5, 0x94, 0x100, 0x7fffffff, 0x5, 0x8, 0x2, 0x4, 0x5, 0xfffffff8, 0x8, 0x9, 0x2, 0x8, 0xaf37, 0x1, 0x0, 0x26, 0x5, 0x2, 0x7, 0xff, 0x0, 0x7, 0x37, 0xffffffff, 0x8, 0x5, 0x9, 0x2, 0x2, 0x1, 0xa, 0x9, 0x8, 0x8, 0x62e1, 0x101, 0xfffff733, 0x1000, 0x518a, 0x2804, 0x87b, 0xfffffffc, 0xa8, 0x7fff, 0x400, 0x8, 0x1, 0x9, 0x68170000, 0x9, 0x7, 0x1e, 0x3ff, 0x1, 0x8, 0xfffffff7, 0x200, 0xffff0001, 0x2, 0x74, 0x7, 0xe74a, 0xfffffe01, 0xb074, 0x6a, 0x5, 0x9, 0x400, 0xc, 0x10001, 0x4b46, 0x642f, 0x80000000, 0x8, 0x8000, 0x80000001, 0x80000001, 0x6, 0x510, 0x3, 0x3, 0xffffffff, 0x3, 0x3, 0x5, 0x80, 0x10, 0x4, 0x1, 0x3, 0x9, 0xd44, 0x7, 0x4, 0x0, 0x9, 0x3, 0x2, 0x609, 0x1, 0x9, 0x9, 0xffff9757, 0x8000, 0x7f, 0x9, 0x5, 0x95, 0x80000000, 0x4, 0x3, 0x7fff, 0x9, 0x4, 0xb, 0x2, 0x38e, 0x7, 0x9d, 0x10001, 0xfff, 0x7f, 0x15a38cb0, 0xfffffffa, 0xe8b3, 0x100, 0x47b, 0x0, 0x10, 0xe22, 0x5, 0x7, 0x0, 0x2, 0x80000001, 0x9, 0xfff, 0x8, 0x7, 0x5, 0x0, 0x3ff, 0x7002, 0x6, 0x8, 0x4, 0xed, 0xf4, 0xde38, 0x200, 0x2, 0x7, 0x8340, 0xb, 0x2, 0x5, 0x6, 0x8000, 0x7, 0x1ff, 0x7fffffff, 0x8, 0x0, 0x7fffffff, 0xf, 0x5, 0x7, 0x2, 0x7, 0x7fff, 0x3, 0x7fffffff, 0x1, 0x1, 0x80000000, 0xea, 0x692, 0xc9f, 0x7, 0x9, 0x7ff, 0x1, 0x59e2, 0x3, 0x0, 0x8000, 0x3, 0x6, 0xfffff64b, 0x6, 0xa6, 0x0, 0x9, 0x7, 0x2, 0xffff, 0x2dc1, 0x3, 0x5, 0x5, 0x4, 0x1, 0x7, 0x26, 0x5, 0x1000, 0x10, 0x2, 0xad, 0xb, 0x8, 0xcc, 0x1b9f, 0x3ff, 0x4d17, 0x8, 0x4, 0x6, 0x24, 0xfff, 0x1000, 0x4dd0, 0xff, 0x7fff, 0x7, 0x8, 0x9, 0x5, 0x10000, 0x9, 0xffffffda, 0x7f, 0x2, 0x0, 0x6, 0x1ff, 0x93ae, 0x7fff, 0x4, 0x1, 0xa00, 0x1ff, 0x7, 0x10000, 0x10, 0x8, 0x6, 0x6, 0x6, 0x9, 0x3, 0x3, 0x40, 0x7, 0x40, 0x2, 0x200, 0xfffffff9, 0x80000000, 0x6, 0xfffffff8, 0x6, 0x1, 0x1, 0x1c63, 0x9, 0xfaf, 0x8, 0x3, 0x9, 0x4, 0x3, 0x8, 0x3, 0x7, 0xfffffffb, 0xff, 0xb096, 0x4, 0xcb, 0x401, 0x8c6, 0x10000, 0x920, 0x0, 0xffffffa2, 0x3, 0x8, 0x6, 0x18, 0x7, 0x7, 0x4, 0x7, 0x664, 0x8, 0xcba, 0x2, 0x401, 0x2, 0x3, 0x3331316e, 0x7, 0xf, 0x2, 0x4, 0x6, 0x3, 0x4, 0x2, 0x4, 0x2, 0x7, 0x7, 0x6c19, 0x2, 0x6, 0x1, 0x4, 0x1, 0x8000, 0x5, 0x1, 0x311, 0x4, 0x7ff, 0xff, 0x7, 0xdb, 0x7f, 0x9, 0x1, 0x8, 0x4, 0xb6b, 0x9, 0x7, 0x3, 0x9, 0x5, 0x7, 0x0, 0x10000, 0x1, 0x7, 0x4, 0x5, 0xc, 0x0, 0x9, 0xfffffff7, 0x3, 0x1, 0x5b, 0x5, 0x3, 0x6, 0xd, 0x8000, 0x0, 0x2, 0x0, 0x40, 0xffffe42f, 0x3, 0x0, 0x8, 0x9, 0xa1e, 0x401, 0x3, 0x51, 0x2, 0x1000, 0x2, 0x753c, 0x1e, 0x7, 0x6, 0x94, 0x4, 0x2, 0x10001, 0x40, 0x5d3, 0x28b2, 0xf, 0x3, 0x0, 0x2ee, 0x1, 0x9, 0xf, 0x5, 0x84b, 0x10001, 0x2, 0x2, 0x1, 0x9, 0xfffffda9, 0x2fe, 0x4, 0x4, 0x5, 0x545, 0x6, 0x7, 0x0, 0x650, 0x3, 0x9, 0xb9, 0x5, 0x79, 0x2, 0x9, 0x101, 0x1, 0x38, 0xef0, 0x2cb, 0xfa06, 0x200, 0x7, 0x80000000, 0xffff3818, 0xd0, 0x5, 0x9, 0x7f, 0xff, 0x4, 0x1, 0x7, 0xf736, 0x8, 0x23c6, 0x7, 0x401, 0x100, 0x5, 0x2, 0xfffffff8, 0x5, 0x2, 0xbf1, 0x467c8826, 0xffff, 0x4, 0x7ff, 0x6, 0x5, 0x6, 0x1000, 0x7ff, 0x1, 0x9, 0x0, 0x3a9, 0x7, 0xb, 0xc, 0x9, 0x1, 0x10, 0x0, 0x2, 0x8, 0xa4, 0x7, 0x0, 0x3, 0x9, 0x10000000, 0x7, 0x6, 0xf, 0x7, 0x5, 0x5, 0xb3aa, 0x2, 0xab9, 0x0, 0x49, 0x9, 0x4, 0x0, 0x4f9, 0x7fff, 0x7, 0x3, 0x9000, 0x6, 0x8, 0x3, 0x10000, 0x7, 0x6, 0x8, 0x793c, 0x4, 0x56a, 0x7, 0x3, 0x886, 0x5, 0x8, 0x0, 0x7fffffff, 0xe34]})
io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r4], 0x1)
executing program 3:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7'])
chdir(&(0x7f0000000240)='./file0\x00')
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0xb0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x10000, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x1000, 0x1)
chdir(&(0x7f00000003c0)='./bus\x00')
open(&(0x7f0000000040)='.\x00', 0x418601, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet6(r1, 0x0, 0x0, 0x4000000)
executing program 3:
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000001280)=ANY=[], 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket(0x200000000000011, 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10)
setgid(0x0)
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002dc0)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0)
executing program 3:
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x8, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)
close(r0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102001, 0x0)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
ioctl$TIOCGPTPEER(r3, 0x5441, 0xb3d)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8)
executing program 33:
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x8, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)
close(r0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102001, 0x0)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
ioctl$TIOCGPTPEER(r3, 0x5441, 0xb3d)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8)
executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
getpid()
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/comedi4\x00', 0x600, 0x0)
ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000040)={0xffffffff, 0x1003, 0x10})
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102368, 0x18fe0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x2040600)
r2 = add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d790", 0x2, 0xfffffffffffffffe)
syz_emit_ethernet(0x76, 0x0, 0x0)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x6)
read$msr(r3, &(0x7f0000000300)=""/137, 0x89)
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe2$watch_queue(0x0, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x90)
keyctl$update(0x2, r2, &(0x7f0000000240)="ac", 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, 0x8000000, 0x1, 0xff, 0x1}, 0x20)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000aaa000/0xe000)=nil, 0xe0fe}})
syz_usb_connect(0x0, 0x34, &(0x7f0000000440)=ANY=[@ANYRESOCT=r2], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
executing program 5:
r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1a, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x40, 0xc, 0x77, 0x2}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x7, {0x7, 0x11, "e4ff14eca8"}}, 0x0}, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000800)={0x14, &(0x7f00000001c0)={0x40, 0xb, 0x8d, {0x8d, 0x3, "6ea51e340468501c6fa2af770858877676c363eb900605c985317ab0e717f2e51d87e4cf1899e5f625e39b7ba263f90ac1ccbc3272175d98550f8d60ce6a4032f4e7250b3e1414501537ed54f7102c2d69b1290c9599439ce02ff211b5fd2ee3c71045627465265b43c78cab17a84e67a0758f0c2eb86a66af74bc79c3142dd495831e3cad5e7ed28d5be3"}}, &(0x7f0000000280)={0x0, 0x3, 0x35, @string={0x35, 0x3, "44e5deabe5b151a2a2665a2e5da1765d9ee15aa391bfff89257ea2ed68542930ef3b8f6205738227b55ad56664b0b1936e2f90"}}}, &(0x7f00000007c0)={0x1c, &(0x7f0000000840)={0x40, 0x3, 0x94, "72651c60af21782b33b43e8abae2dda8a55a38efb11d07f1d12c227cd36955e35e7ee070f2be39a762a129c7d165fd7826de0b735ddd86fbcb733cb7d7b3924cf5107ae291635b1cee150917556cb1a6fcd9a0cf37c05251b709359645d7a20eac78b8bba7b4d5e411df5adb795455e5b1f03a401b406ef03c127902b39333d20d1340d64d47a592aac9aa0e132114ae90e9ebce"}, &(0x7f0000000340)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000780)={0x21, 0x0, 0x4, "497aba7e"}})
executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00')
r1 = syz_open_dev$swradio(&(0x7f0000002a40), 0x1, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e00030000000300000005000700080000008e9363c4c553ed462c985832579f4dacc9eb9273954201a3272706dafa5114ce0875ac03d836cd8057e02095ec225f81c53015755d99f73c34f53873cb9f1192bb923542dd94e868827372da"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
sendmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18, 0x800}, 0x0)
recvmsg(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x4, 0x8, 0xb}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x200000000000011, 0x2, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x8000, 0x40009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0xa, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x3, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0x45c)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r11, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000002b00)=@mmap={0x100, 0x7, 0x4, 0x800, 0x5, {0x77359400}, {0x2, 0x2, 0xf9, 0x5, 0xf, 0x0, "c41ae572"}, 0x8, 0x1, {}, 0xc7f5})
fchdir(r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240400c4}, 0xc004000)
r12 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000008d904c2a000000000000109022400010000b000090400faff030001000921f6f40001220500090581030800030009e3be2cd8697ebc78"], 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004004}, 0x4004001)
syz_usb_control_io$hid(r12, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0xfffffffffffffffe, 0x10120)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000480)={0x0, 0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f00000000c0), 0x1000082, &(0x7f0000000100)={[], [{@obj_role={'obj_role', 0x3d, '/dev/\xecE\x89\xe6\xb6\x95k\xf5\xff\xff\xff\xff\xff\xff\x0f{\xad\xd4s\x04S2\xe6\xfbmA\xe3&\x84\x96\xbf\xc2\xe3ARYv]\xadE\x82\xaa\xdbb'}}]})
accept$phonet_pipe(r0, &(0x7f0000000080), &(0x7f0000000140)=0x10)
socket$nl_route(0x10, 0x3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x80000018})
shutdown(0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x10000, 0x1, 0x8000000, 0x1000, &(0x7f0000ffe000/0x1000)=nil})
epoll_create1(0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, 0x0, 0xc000)
sched_setaffinity(0x0, 0xff02, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca4bb6", "9ecb592c6ee49fbd"}, 0x28)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
socket$netlink(0x10, 0x3, 0x10)
readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/50, 0x32}, {&(0x7f0000000280)=""/203, 0xcb}, {&(0x7f0000000380)=""/11, 0xb}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/226, 0xe2}], 0x5)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x400000}, 0xc)
executing program 4:
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x42}, 0x0, 0x0})
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000f40), 0x40, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000), 0x181cc0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000280)={0x40}, 0x0, 0x0})
syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x42}, 0x0, 0x0}) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000f40), 0x40, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000), 0x181cc0, 0x0) (async)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000280)={0x40}, 0x0, 0x0}) (async)
executing program 1:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sysfs$1(0x1, &(0x7f0000000380)='\x00')
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000)
mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil)
socket$netlink(0x10, 0x3, 0x12)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
read$FUSE(r3, &(0x7f0000005e40)={0x2020, 0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
write$FUSE_ATTR(r3, &(0x7f0000005340)={0x78, 0x0, r4, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7b, 0x9, 0x800, 0x6000, 0x2, r5, r6, 0xb, 0x8, 0x1000000}}}, 0x78)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001100010027bd7000fddbff250000000009"], 0x20}, 0x1, 0x0, 0x0, 0x8855}, 0x80)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004050000000000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES16=r1, @ANYRES16=r5, @ANYBLOB='\x00'/28], 0x48)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r9, 0x0, 0x0, 0x0, <r10=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r10, r8, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b002edd06f95bce46786fdf38000075000000000000000000000400000000", @ANYRESHEX=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0500"/28], 0x2f)
capset(&(0x7f0000000480)={0x19980330}, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x89, 0xfffffffb})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES64, @ANYBLOB="0000000000000000b702000014000000b7060000050000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff0000000065090000000000007baaf0ff00000000ad9900000000000007080000f8ffffffa400000000000007040000f0ffffffc7020000080000001826000000", @ANYRESDEC=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
getsockopt$inet_buf(r0, 0x118, 0x2, 0x0, &(0x7f00000003c0))
executing program 5:
syz_open_procfs(0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_pidfd_open(0x0, 0x0)
setns(r0, 0x8020000)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x2, 0x4}, &(0x7f0000000380)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_MSG_RING={0x28, 0x7b, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)="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", 0x600, 0x3, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089be, 0x1, 0x5, 0x248}, &(0x7f0000000240)=<r6=>0x0, &(0x7f0000000440)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000040)=0xffffdffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, 0x0, 0x0, 0x1e})
io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0)
setxattr(0x0, &(0x7f00000001c0)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0, 0x1)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000000000000000050006000900000005000200fc801800"], 0x3c}}, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r9, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000001c0)={'vcan0\x00'})
executing program 1:
socket$inet(0x2, 0x2, 0x1)
clock_adjtime(0x3, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x5)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0x0, 0x2, 0x1, "6e6a022b19e9a2f416fb109e2be58b281178b8d46c5d87ebcdba051ac8086181", 0x33363248})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
close(0xffffffffffffffff)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0xf0, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xb4, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ALLOWEDIPS={0x28, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0x2a, 0x0, "b25dd300350731437df94f0a338977934d6951cdd6c61e31cc7172c856b141e3f4e87e6ab615ea379a12c5a6f5c6e8b30138f5f3570909f89f3e47f8090000c30a1c48cdff030000fad4624800"}, 0xd8)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
syz_emit_ethernet(0xd7, &(0x7f00000003c0)={@local, @random="e462e98700", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0xc9, 0x64, 0x0, 0x3, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x7, 0x0, 0xe7}, {"9537a46f78a8279dbbe3f5664b557be136b68e30d96ab68a95018ec57bc85d19f7f103383702974edc6b4fde0c3cbb5387c10d61cf29fd30870a8b79224d729f01b1682ed8b451b60726fb41f7b1dbefa523dcab4fbe181f67eacc89345c3b29cc296fe1dfdece7c9da77a5b419b12ca738deb6af4571e483db7ca5d2636ab9c14a84c8e4d8455adca1eec05ce1803bc5141b2d5b740c8c0616b0e98c628cd848f"}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b700000050000008bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$unix(0x1, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23002abd7000fcdbdf2501000000000000000c410000000c0014197588c0105e40df"], 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x4040050)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
executing program 6:
prlimit64(0x0, 0xe, 0x0, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) (async, rerun: 32)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) (async)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x101542, 0x0) (async)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000010}) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10)
setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f00000009c0)=0x1234, 0x4)
executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xcb}, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000080)=0x1c)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, 0x0, 0x0, 0x40800)
recvmsg$qrtr(r1, 0x0, 0x0, 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x6a, 0x3, 0x0, &(0x7f0000000180))
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009050a", @ANYRES16], 0x0)
syz_usb_ep_read(r5, 0xa, 0x0, 0x0)
setns(r4, 0x24020000)
mount$9p_xen(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x44000, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x8, 0x3, 0x4})
executing program 4:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
chdir(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x71, r2}, 0x38)
unshare(0x66000080) (fail_nth: 1)
syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c83010203010902"], 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/18, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYBLOB="9b00000000000000070000faffffff", @ANYRES32=0x0, @ANYRES32, @ANYRES16=r0], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000000c0)=[@dead_binder_done, @free_buffer], 0x11, 0x0, &(0x7f0000000140)="7497c6a6b8c09e2112877e76c941c9c499"})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r5, &(0x7f0000000380), &(0x7f0000000400)=""/236}, 0x20)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_PIT2(r7, 0x4070aea0, &(0x7f0000000040)={[{0x2, 0x1, 0x81, 0x7f, 0x6, 0x7, 0x1, 0x7f, 0x7, 0x5, 0x7f, 0x92, 0x80000}, {0x8ab, 0x0, 0x1, 0x40, 0x7, 0x9, 0x8, 0xfa, 0x0, 0x6d, 0x6, 0x9, 0xa32}, {0x5, 0x6, 0x78, 0xa1, 0xd, 0x8, 0x6, 0x1, 0x1, 0x5, 0x1, 0xff, 0x7}], 0x7})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
executing program 1:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
chdir(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x71, r2}, 0x38)
unshare(0x66000080)
syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c83010203010902"], 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/18, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYBLOB="9b00000000000000070000faffffff", @ANYRES32=0x0, @ANYRES32, @ANYRES16=r0], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000000c0)=[@dead_binder_done, @free_buffer], 0x11, 0x0, &(0x7f0000000140)="7497c6a6b8c09e2112877e76c941c9c499"})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r5, &(0x7f0000000380), &(0x7f0000000400)=""/236}, 0x20)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_PIT2(r7, 0x4070aea0, &(0x7f0000000040)={[{0x2, 0x1, 0x81, 0x7f, 0x6, 0x7, 0x1, 0x7f, 0x7, 0x5, 0x7f, 0x92, 0x80000}, {0x8ab, 0x0, 0x1, 0x40, 0x7, 0x9, 0x8, 0xfa, 0x0, 0x6d, 0x6, 0x9, 0xa32}, {0x5, 0x6, 0x78, 0xa1, 0xd, 0x8, 0x6, 0x1, 0x1, 0x5, 0x1, 0xff, 0x7}], 0x7})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000300)={@loopback, <r2=>0x0}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100850}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@ipv4_newaddr={0x3c, 0x14, 0x100, 0x70bd2a, 0x25dfdbfd, {0x2, 0x38, 0x10, 0xff, r2}, [@IFA_LABEL={0x14, 0x3, 'pimreg1\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3ff}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x4d)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x69}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100009060000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r11, @ANYBLOB], 0x44}}, 0x0)
r12 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r13], 0x5c}}, 0x40)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902120001000000000904"], 0x0)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x176)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) (fail_nth: 11)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)
executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="34000000000803000000000000000000000000000900010073797e30000000000600024088a800000500030001000000040004"], 0x34}}, 0x800)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="b00000000208010200000000000000000500000109000100"], 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x45, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x6081}, 0x4020881)
executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0x8, 0x7, 0x66, 0x5}, {0x2, 0xf, 0x9, 0xca5}, {0x5, 0x8, 0xc, 0x7}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x3a85ef35342a412e)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xceca, 0x1c800, 0x2, 0x25f})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x800005, 0x6a], 0x1, 0x1000d6})
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, &(0x7f0000000000)=@add_del={0x2, 0x0})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x95}, 0x1c)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
madvise(&(0x7f0000c46000/0x3000)=nil, 0x3000, 0xa)
munmap(&(0x7f000026a000/0x12000)=nil, 0x12000)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
membarrier(0x2, 0x0)
executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x176)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0xf00, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)
executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="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", 0xfd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c", 0x3d}, {&(0x7f0000000a40)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506", 0x2}], 0x1}}], 0x3, 0x11)
r1 = accept4(r0, 0x0, 0x0, 0x800)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f00000007c0), 0x800, 0x0)
write$dsp(r2, &(0x7f0000000800)="a8209ba6", 0x4)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x492492492492846, 0x0)
connect$unix(r4, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$sock_bt_hci(r3, 0x800448d3, &(0x7f0000000080)="dcd7c1d5f0bf09399a7f39de26d0f7709fba56f5951f1432d6e06bd8336d47cee11f707bd8761b5bc1527cb03853d30479041476cd09d29d4f2573b7b7bd2222ac63f7cc54e7")
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff00"/43], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan1\x00'})
executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000017c0), r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x76, 0x0, 0x0)
socket$inet6(0xa, 0xa, 0x108000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0)
ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x3, &(0x7f0000000580)=[0x21, 0x8004, 0x1, 0x4, 0x9, 0x1ed, 0x2, 0x2, 0xbb, 0xc58f, 0x2060, 0xfed, 0xfffffffa, 0x1ac, 0xfffffff8], 0x0, 0x2})
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8)
r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000080)={0x5, 0x2, 0x1, "6705f8a090b30f40032abcd30cfaa74ed04eafba2a466ae693f6e48e9ae4bba7", 0x32314d54})
syz_open_dev$sg(0x0, 0xa, 0x241)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0x80)
r5 = socket$inet(0x2, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f000000c000/0x3000)=nil, &(0x7f000000d000/0x1000)=nil, 0x3000, 0x3})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x0, 0x0, 0x0, 0x8, 0x36, &(0x7f0000000c00)=""/54, 0x41000, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000e00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000e40)=[{0x126f2af, 0x5, 0x2, 0x9}, {0x1, 0x3, 0x6, 0x9}], 0x10, 0x5}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000004d00)=@newqdisc={0x148, 0x24, 0xf0b, 0x1000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfffe}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x9, 0x3, 0x488f, 0x16, 0xf, 0x7}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={0x0, r2, 0x4000, r3}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x404c054)
openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
executing program 5:
socket$inet(0x2, 0x2, 0x1)
clock_adjtime(0x3, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x5)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0x0, 0x2, 0x1, "6e6a022b19e9a2f416fb109e2be58b281178b8d46c5d87ebcdba051ac8086181", 0x33363248})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
close(0xffffffffffffffff)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0xf0, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xb4, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ALLOWEDIPS={0x28, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000017c0), r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x76, 0x0, 0x0)
socket$inet6(0xa, 0xa, 0x108000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0)
ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x3, &(0x7f0000000580)=[0x21, 0x8004, 0x1, 0x4, 0x9, 0x1ed, 0x2, 0x2, 0xbb, 0xc58f, 0x2060, 0xfed, 0xfffffffa, 0x1ac, 0xfffffff8], 0x0, 0x2})
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8)
syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0x80)
r4 = socket$inet(0x2, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f000000c000/0x3000)=nil, &(0x7f000000d000/0x1000)=nil, 0x3000, 0x3})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x0, 0x0, 0x0, 0x8, 0x36, &(0x7f0000000c00)=""/54, 0x41000, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000e00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000e40)=[{0x126f2af, 0x5, 0x2, 0x9}, {0x1, 0x3, 0x6, 0x9}], 0x10, 0x5}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000004d00)=@newqdisc={0x148, 0x24, 0xf0b, 0x1000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfffe}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x9, 0x3, 0x488f, 0x16, 0xf, 0x7}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={0x0, r2, 0x4000, r3}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x404c054)
openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
executing program 0:
socket$inet(0x2, 0x2, 0x1)
clock_adjtime(0x3, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r6, 0xffffffffffffffff, 0x0, 0x5)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0x0, 0x2, 0x1, "6e6a022b19e9a2f416fb109e2be58b281178b8d46c5d87ebcdba051ac8086181", 0x33363248})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
close(0xffffffffffffffff)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0xe0, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xb8, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
executing program 6:
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0xffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (fail_nth: 2)
executing program 5:
socket(0x2, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1)
preadv(r2, &(0x7f0000005280)=[{&(0x7f0000004280)=""/4096, 0x1000}], 0x1, 0x9, 0x6)
mount$tmpfs(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB])
r3 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd)
quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000700, 0x0, &(0x7f00000001c0))
ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000280)={0x1, 0x1, @raw_data=[0x8, 0x58, 0x1, 0x7, 0x1, 0xd, 0x1b8, 0x4, 0x82, 0x7, 0x5, 0x1, 0x100, 0x5, 0x766f275b, 0x9]})
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000061401"], 0x28}}, 0x20040080)
r5 = socket$inet6(0xa, 0x2, 0x0)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r6, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc)
syz_emit_vhci(&(0x7f0000009c40)=ANY=[], 0x17)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000140))
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2, @thr={0x0, 0x0}})
ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}})
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=@deltaction={0x1f4, 0x31, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x15d2}}, {0x10, 0x418, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x129}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x56}}]}, @TCA_ACT_TAB={0x4}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x801}, 0x8001)
openat$audio1(0xffffffffffffff9c, 0x0, 0x40, 0x0)
mremap(&(0x7f000000d000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000ffb000/0x3000)=nil)
executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000009440)=<r2=>0x0)
bind$nfc_llcp(r1, &(0x7f0000009480)={0x27, r2, 0xffffffffffffffff, 0x5, 0x1, 0x6, "be8e19b6a865e7ab561f559d74a73485c8abd6554271850320b9571ca0d8f47c1e1a12c085d196fd2eb6853571e830e500", 0x30}, 0x60)
syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100153a48e08f00a71729188010203010902240001060000000904000002ffffff0009050b0000000000000905ec"], 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) (async)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000009440)) (async)
bind$nfc_llcp(r1, &(0x7f0000009480)={0x27, r2, 0xffffffffffffffff, 0x5, 0x1, 0x6, "be8e19b6a865e7ab561f559d74a73485c8abd6554271850320b9571ca0d8f47c1e1a12c085d196fd2eb6853571e830e500", 0x30}, 0x60) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100153a48e08f00a71729188010203010902240001060000000904000002ffffff0009050b0000000000000905ec"], 0x0) (async)
executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4850}, 0x8000)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8000, 0x4f}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24004804}, 0x800)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008000)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r8, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r9 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r9, &(0x7f0000002700)=""/102392, 0x18ff8)
r10 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0)
mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002000010027bd70000009000002000000000000070000000014000200fe800000000000000000000000000101080018004e234e23"], 0x38}, 0x1, 0x0, 0x0, 0x24048844}, 0x0)
executing program 5:
r0 = socket(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x10100, 0x139)
faccessat2(r4, &(0x7f0000000200)='./file0\x00', 0x88, 0x100)
r5 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044060}, 0x40000)
socket$netlink(0x10, 0x3, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xaa100, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB])
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48)
r10 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$sock_linger(r10, 0x1, 0x3c, 0x0, 0x0)
sendmmsg$inet6(r10, &(0x7f0000003cc0)=[{{0x0, 0xe00, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000}})
executing program 6:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
link(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1)
getdents64(r0, &(0x7f00000007c0)=""/85, 0x55)
executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
fsopen(0x0, 0x1)
openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x43)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x8, <r4=>r0, 0x80000})
connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-link-openat$dir-getdents64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
link(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1)
getdents64(r0, &(0x7f00000007c0)=""/85, 0x55)

program crashed: KASAN: slab-use-after-free Read in afs_dynroot_readdir
single: successfully extracted reproducer
found reproducer with 6 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-link-openat$dir
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
link(&(0x7f0000000000)='./file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-link-getdents64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
link(&(0x7f0000000000)='./file0\x00', 0x0)
getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/85, 0x55)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-openat$dir-getdents64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1)
getdents64(r0, &(0x7f00000007c0)=""/85, 0x55)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-link-openat$dir-getdents64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='dyn'])
link(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1)
getdents64(r0, &(0x7f00000007c0)=""/85, 0x55)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-chdir-link-openat$dir-getdents64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
link(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1)
getdents64(r0, &(0x7f00000007c0)=""/85, 0x55)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$afs-chdir-link-openat$dir-getdents64
detailed listing:
executing program 0:
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
link(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1)
getdents64(r0, &(0x7f00000007c0)=""/85, 0x55)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-link-openat$dir-getdents64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
link(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1)
getdents64(r0, &(0x7f00000007c0)=""/85, 0x55)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-link-openat$dir-getdents64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
link(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1)
getdents64(r0, &(0x7f00000007c0)=""/85, 0x55)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-link-openat$dir-getdents64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
link(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1)
getdents64(r0, &(0x7f00000007c0)=""/85, 0x55)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-link-openat$dir-getdents64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
link(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1)
getdents64(r0, &(0x7f00000007c0)=""/85, 0x55)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-link-openat$dir-getdents64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB])
chdir(&(0x7f0000000340)='./file0\x00')
link(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1)
getdents64(r0, &(0x7f00000007c0)=""/85, 0x55)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-link-openat$dir-getdents64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='dyn'])
chdir(0x0)
link(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1)
getdents64(r0, &(0x7f00000007c0)=""/85, 0x55)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-link-openat$dir-getdents64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
link(0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1)
getdents64(r0, &(0x7f00000007c0)=""/85, 0x55)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-link-openat$dir-getdents64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
link(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1)
getdents64(r0, &(0x7f00000007c0)=""/85, 0x55)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-link-openat$dir-getdents64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
link(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1)
getdents64(r0, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-link-openat$dir-getdents64
program crashed: KASAN: slab-use-after-free Read in afs_dynroot_readdir
simplifying C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-link-openat$dir-getdents64
program crashed: KASAN: slab-use-after-free Read in afs_dynroot_readdir
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-link-openat$dir-getdents64
program crashed: KASAN: slab-use-after-free Read in afs_dynroot_readdir
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-link-openat$dir-getdents64
program crashed: KASAN: slab-use-after-free Read in afs_dynroot_readdir
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-link-openat$dir-getdents64
program crashed: KASAN: slab-use-after-free Read in afs_dynroot_readdir
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-link-openat$dir-getdents64
program crashed: KASAN: slab-use-after-free Read in afs_dynroot_readdir
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-link-openat$dir-getdents64
program crashed: KASAN: slab-use-after-free Read in afs_dynroot_readdir
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-link-openat$dir-getdents64
program crashed: KASAN: slab-use-after-free Read in afs_dynroot_readdir
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-link-openat$dir-getdents64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
link(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1)
getdents64(r0, &(0x7f00000007c0)=""/85, 0x55)

program crashed: KASAN: slab-use-after-free Read in afs_dynroot_readdir
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-link-openat$dir-getdents64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
link(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1)
getdents64(r0, &(0x7f00000007c0)=""/85, 0x55)

program crashed: KASAN: slab-use-after-free Read in afs_dynroot_readdir
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$afs-chdir-link-openat$dir-getdents64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
link(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1)
getdents64(r0, &(0x7f00000007c0)=""/85, 0x55)

program crashed: KASAN: slab-use-after-free Read in afs_dynroot_readdir
validation run: crashed=true
reproducing took 1h58m24.790780264s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in afs_dynroot_readdir_cells fs/afs/dynroot.c:296 [inline]
BUG: KASAN: slab-use-after-free in afs_dynroot_readdir+0x94e/0xb70 fs/afs/dynroot.c:352
Read of size 4 at addr ffff888076fbe148 by task syz.0.8268/15038

CPU: 1 UID: 0 PID: 15038 Comm: syz.0.8268 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xcd/0x630 mm/kasan/report.c:482
 kasan_report+0xe0/0x110 mm/kasan/report.c:595
 afs_dynroot_readdir_cells fs/afs/dynroot.c:296 [inline]
 afs_dynroot_readdir+0x94e/0xb70 fs/afs/dynroot.c:352
 iterate_dir+0x296/0xaf0 fs/readdir.c:108
 __do_sys_getdents64 fs/readdir.c:410 [inline]
 __se_sys_getdents64 fs/readdir.c:396 [inline]
 __x64_sys_getdents64+0x13c/0x2c0 fs/readdir.c:396
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4e0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f085598eec9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff49e8bd28 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
RAX: ffffffffffffffda RBX: 00007f0855be5fa0 RCX: 00007f085598eec9
RDX: 0000000000000055 RSI: 00002000000007c0 RDI: 0000000000000003
RBP: 00007f0855a11f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f0855be5fa0 R14: 00007f0855be5fa0 R15: 0000000000000003
 </TASK>

Allocated by task 15036:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:56
 kasan_save_track+0x14/0x30 mm/kasan/common.c:77
 poison_kmalloc_redzone mm/kasan/common.c:400 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:417
 kmalloc_noprof include/linux/slab.h:957 [inline]
 kzalloc_noprof include/linux/slab.h:1094 [inline]
 afs_alloc_cell fs/afs/cell.c:137 [inline]
 afs_lookup_cell+0x61d/0x1680 fs/afs/cell.c:265
 afs_dynroot_lookup_cell fs/afs/dynroot.c:111 [inline]
 afs_dynroot_lookup+0x2e2/0xa90 fs/afs/dynroot.c:159
 __lookup_slow+0x251/0x460 fs/namei.c:1816
 lookup_slow fs/namei.c:1833 [inline]
 walk_component+0x353/0x5b0 fs/namei.c:2151
 lookup_last fs/namei.c:2652 [inline]
 path_lookupat+0x142/0x6d0 fs/namei.c:2676
 filename_lookup+0x224/0x5f0 fs/namei.c:2705
 do_linkat+0x14c/0x5a0 fs/namei.c:4991
 __do_sys_link fs/namei.c:5045 [inline]
 __se_sys_link fs/namei.c:5043 [inline]
 __x64_sys_link+0x7d/0xa0 fs/namei.c:5043
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4e0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 15038:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:56
 kasan_save_track+0x14/0x30 mm/kasan/common.c:77
 __kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:587
 kasan_save_free_info mm/kasan/kasan.h:406 [inline]
 poison_slab_object mm/kasan/common.c:252 [inline]
 __kasan_slab_free+0x5f/0x80 mm/kasan/common.c:284
 kasan_slab_free include/linux/kasan.h:234 [inline]
 slab_free_hook mm/slub.c:2514 [inline]
 slab_free mm/slub.c:6566 [inline]
 kfree+0x2b8/0x6d0 mm/slub.c:6773
 afs_cell_destroy+0x21c/0x310 fs/afs/cell.c:525
 rcu_do_batch kernel/rcu/tree.c:2605 [inline]
 rcu_core+0x799/0x1530 kernel/rcu/tree.c:2861
 handle_softirqs+0x219/0x8e0 kernel/softirq.c:622
 __do_softirq kernel/softirq.c:656 [inline]
 invoke_softirq kernel/softirq.c:496 [inline]
 __irq_exit_rcu+0x109/0x170 kernel/softirq.c:723
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:739
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1052 [inline]
 sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1052
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702

Last potentially related work creation:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:56
 kasan_record_aux_stack+0xa7/0xc0 mm/kasan/generic.c:559
 __call_rcu_common.constprop.0+0xa5/0xa10 kernel/rcu/tree.c:3123
 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263
 process_scheduled_works kernel/workqueue.c:3346 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427
 kthread+0x3c2/0x780 kernel/kthread.c:463
 ret_from_fork+0x56a/0x730 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Second to last potentially related work creation:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:56
 kasan_record_aux_stack+0xa7/0xc0 mm/kasan/generic.c:559
 insert_work+0x36/0x230 kernel/workqueue.c:2186
 __queue_work+0x97e/0x1160 kernel/workqueue.c:2341
 queue_work_on+0x1a4/0x1f0 kernel/workqueue.c:2392
 queue_work include/linux/workqueue.h:669 [inline]
 afs_put_cell.part.0+0x1ab/0x240 fs/afs/cell.c:570
 afs_put_cell fs/afs/cell.c:558 [inline]
 afs_manage_cell_work+0x6de/0x1940 fs/afs/cell.c:860
 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263
 process_scheduled_works kernel/workqueue.c:3346 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427
 kthread+0x3c2/0x780 kernel/kthread.c:463
 ret_from_fork+0x56a/0x730 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

The buggy address belongs to the object at ffff888076fbe000
 which belongs to the cache kmalloc-1k of size 1024
The buggy address is located 328 bytes inside of
 freed 1024-byte region [ffff888076fbe000, ffff888076fbe400)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x76fb8
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000040 ffff88801b026dc0 ffffea0000b9c200 dead000000000002
raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 00fff00000000040 ffff88801b026dc0 ffffea0000b9c200 dead000000000002
head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 00fff00000000003 ffffea0001dbee01 00000000ffffffff 00000000ffffffff
head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 49, tgid 49 (kworker/u8:3), ts 178491208774, free_ts 178478998089
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x1c0/0x230 mm/page_alloc.c:1850
 prep_new_page mm/page_alloc.c:1858 [inline]
 get_page_from_freelist+0x10a3/0x3a30 mm/page_alloc.c:3884
 __alloc_frozen_pages_noprof+0x25f/0x2470 mm/page_alloc.c:5183
 alloc_pages_mpol+0x1fb/0x550 mm/mempolicy.c:2416
 alloc_slab_page mm/slub.c:3030 [inline]
 allocate_slab mm/slub.c:3203 [inline]
 new_slab+0x24a/0x360 mm/slub.c:3257
 ___slab_alloc+0xdc4/0x1ae0 mm/slub.c:4627
 __slab_alloc.constprop.0+0x63/0x110 mm/slub.c:4746
 __slab_alloc_node mm/slub.c:4822 [inline]
 slab_alloc_node mm/slub.c:5233 [inline]
 __do_kmalloc_node mm/slub.c:5602 [inline]
 __kmalloc_noprof+0x501/0x880 mm/slub.c:5615
 kmalloc_noprof include/linux/slab.h:961 [inline]
 kzalloc_noprof include/linux/slab.h:1094 [inline]
 neigh_alloc net/core/neighbour.c:522 [inline]
 ___neigh_create+0x14e6/0x28c0 net/core/neighbour.c:656
 ip6_finish_output2+0x11aa/0x1cf0 net/ipv6/ip6_output.c:128
 __ip6_finish_output+0x3cd/0x1010 net/ipv6/ip6_output.c:209
 ip6_finish_output net/ipv6/ip6_output.c:220 [inline]
 NF_HOOK_COND include/linux/netfilter.h:307 [inline]
 ip6_output+0x253/0x710 net/ipv6/ip6_output.c:247
 dst_output include/net/dst.h:464 [inline]
 NF_HOOK include/linux/netfilter.h:318 [inline]
 ndisc_send_skb+0xa85/0x1f50 net/ipv6/ndisc.c:512
 ndisc_send_ns+0xc6/0x140 net/ipv6/ndisc.c:670
 addrconf_dad_work+0xbc9/0x14e0 net/ipv6/addrconf.c:4282
 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263
page last free pid 5848 tgid 5848 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1394 [inline]
 __free_frozen_pages+0x7df/0x1160 mm/page_alloc.c:2906
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4d/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:352
 kasan_slab_alloc include/linux/kasan.h:252 [inline]
 slab_post_alloc_hook mm/slub.c:4946 [inline]
 slab_alloc_node mm/slub.c:5245 [inline]
 kmem_cache_alloc_noprof+0x250/0x6e0 mm/slub.c:5252
 getname_flags.part.0+0x4c/0x550 fs/namei.c:146
 getname_flags+0x93/0xf0 include/linux/audit.h:345
 getname include/linux/fs.h:2916 [inline]
 do_sys_openat2+0xb8/0x1d0 fs/open.c:1431
 do_sys_open fs/open.c:1452 [inline]
 __do_sys_openat fs/open.c:1468 [inline]
 __se_sys_openat fs/open.c:1463 [inline]
 __x64_sys_openat+0x174/0x210 fs/open.c:1463
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4e0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff888076fbe000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888076fbe080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff888076fbe100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                              ^
 ffff888076fbe180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888076fbe200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in afs_dynroot_readdir_cells fs/afs/dynroot.c:296 [inline]
BUG: KASAN: slab-use-after-free in afs_dynroot_readdir+0x94e/0xb70 fs/afs/dynroot.c:352
Read of size 4 at addr ffff888076fbe148 by task syz.0.8268/15038

CPU: 1 UID: 0 PID: 15038 Comm: syz.0.8268 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xcd/0x630 mm/kasan/report.c:482
 kasan_report+0xe0/0x110 mm/kasan/report.c:595
 afs_dynroot_readdir_cells fs/afs/dynroot.c:296 [inline]
 afs_dynroot_readdir+0x94e/0xb70 fs/afs/dynroot.c:352
 iterate_dir+0x296/0xaf0 fs/readdir.c:108
 __do_sys_getdents64 fs/readdir.c:410 [inline]
 __se_sys_getdents64 fs/readdir.c:396 [inline]
 __x64_sys_getdents64+0x13c/0x2c0 fs/readdir.c:396
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4e0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f085598eec9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff49e8bd28 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
RAX: ffffffffffffffda RBX: 00007f0855be5fa0 RCX: 00007f085598eec9
RDX: 0000000000000055 RSI: 00002000000007c0 RDI: 0000000000000003
RBP: 00007f0855a11f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f0855be5fa0 R14: 00007f0855be5fa0 R15: 0000000000000003
 </TASK>

Allocated by task 15036:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:56
 kasan_save_track+0x14/0x30 mm/kasan/common.c:77
 poison_kmalloc_redzone mm/kasan/common.c:400 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:417
 kmalloc_noprof include/linux/slab.h:957 [inline]
 kzalloc_noprof include/linux/slab.h:1094 [inline]
 afs_alloc_cell fs/afs/cell.c:137 [inline]
 afs_lookup_cell+0x61d/0x1680 fs/afs/cell.c:265
 afs_dynroot_lookup_cell fs/afs/dynroot.c:111 [inline]
 afs_dynroot_lookup+0x2e2/0xa90 fs/afs/dynroot.c:159
 __lookup_slow+0x251/0x460 fs/namei.c:1816
 lookup_slow fs/namei.c:1833 [inline]
 walk_component+0x353/0x5b0 fs/namei.c:2151
 lookup_last fs/namei.c:2652 [inline]
 path_lookupat+0x142/0x6d0 fs/namei.c:2676
 filename_lookup+0x224/0x5f0 fs/namei.c:2705
 do_linkat+0x14c/0x5a0 fs/namei.c:4991
 __do_sys_link fs/namei.c:5045 [inline]
 __se_sys_link fs/namei.c:5043 [inline]
 __x64_sys_link+0x7d/0xa0 fs/namei.c:5043
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4e0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 15038:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:56
 kasan_save_track+0x14/0x30 mm/kasan/common.c:77
 __kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:587
 kasan_save_free_info mm/kasan/kasan.h:406 [inline]
 poison_slab_object mm/kasan/common.c:252 [inline]
 __kasan_slab_free+0x5f/0x80 mm/kasan/common.c:284
 kasan_slab_free include/linux/kasan.h:234 [inline]
 slab_free_hook mm/slub.c:2514 [inline]
 slab_free mm/slub.c:6566 [inline]
 kfree+0x2b8/0x6d0 mm/slub.c:6773
 afs_cell_destroy+0x21c/0x310 fs/afs/cell.c:525
 rcu_do_batch kernel/rcu/tree.c:2605 [inline]
 rcu_core+0x799/0x1530 kernel/rcu/tree.c:2861
 handle_softirqs+0x219/0x8e0 kernel/softirq.c:622
 __do_softirq kernel/softirq.c:656 [inline]
 invoke_softirq kernel/softirq.c:496 [inline]
 __irq_exit_rcu+0x109/0x170 kernel/softirq.c:723
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:739
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1052 [inline]
 sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1052
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702

Last potentially related work creation:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:56
 kasan_record_aux_stack+0xa7/0xc0 mm/kasan/generic.c:559
 __call_rcu_common.constprop.0+0xa5/0xa10 kernel/rcu/tree.c:3123
 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263
 process_scheduled_works kernel/workqueue.c:3346 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427
 kthread+0x3c2/0x780 kernel/kthread.c:463
 ret_from_fork+0x56a/0x730 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Second to last potentially related work creation:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:56
 kasan_record_aux_stack+0xa7/0xc0 mm/kasan/generic.c:559
 insert_work+0x36/0x230 kernel/workqueue.c:2186
 __queue_work+0x97e/0x1160 kernel/workqueue.c:2341
 queue_work_on+0x1a4/0x1f0 kernel/workqueue.c:2392
 queue_work include/linux/workqueue.h:669 [inline]
 afs_put_cell.part.0+0x1ab/0x240 fs/afs/cell.c:570
 afs_put_cell fs/afs/cell.c:558 [inline]
 afs_manage_cell_work+0x6de/0x1940 fs/afs/cell.c:860
 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263
 process_scheduled_works kernel/workqueue.c:3346 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3427
 kthread+0x3c2/0x780 kernel/kthread.c:463
 ret_from_fork+0x56a/0x730 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

The buggy address belongs to the object at ffff888076fbe000
 which belongs to the cache kmalloc-1k of size 1024
The buggy address is located 328 bytes inside of
 freed 1024-byte region [ffff888076fbe000, ffff888076fbe400)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x76fb8
head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000040 ffff88801b026dc0 ffffea0000b9c200 dead000000000002
raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 00fff00000000040 ffff88801b026dc0 ffffea0000b9c200 dead000000000002
head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
head: 00fff00000000003 ffffea0001dbee01 00000000ffffffff 00000000ffffffff
head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 49, tgid 49 (kworker/u8:3), ts 178491208774, free_ts 178478998089
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x1c0/0x230 mm/page_alloc.c:1850
 prep_new_page mm/page_alloc.c:1858 [inline]
 get_page_from_freelist+0x10a3/0x3a30 mm/page_alloc.c:3884
 __alloc_frozen_pages_noprof+0x25f/0x2470 mm/page_alloc.c:5183
 alloc_pages_mpol+0x1fb/0x550 mm/mempolicy.c:2416
 alloc_slab_page mm/slub.c:3030 [inline]
 allocate_slab mm/slub.c:3203 [inline]
 new_slab+0x24a/0x360 mm/slub.c:3257
 ___slab_alloc+0xdc4/0x1ae0 mm/slub.c:4627
 __slab_alloc.constprop.0+0x63/0x110 mm/slub.c:4746
 __slab_alloc_node mm/slub.c:4822 [inline]
 slab_alloc_node mm/slub.c:5233 [inline]
 __do_kmalloc_node mm/slub.c:5602 [inline]
 __kmalloc_noprof+0x501/0x880 mm/slub.c:5615
 kmalloc_noprof include/linux/slab.h:961 [inline]
 kzalloc_noprof include/linux/slab.h:1094 [inline]
 neigh_alloc net/core/neighbour.c:522 [inline]
 ___neigh_create+0x14e6/0x28c0 net/core/neighbour.c:656
 ip6_finish_output2+0x11aa/0x1cf0 net/ipv6/ip6_output.c:128
 __ip6_finish_output+0x3cd/0x1010 net/ipv6/ip6_output.c:209
 ip6_finish_output net/ipv6/ip6_output.c:220 [inline]
 NF_HOOK_COND include/linux/netfilter.h:307 [inline]
 ip6_output+0x253/0x710 net/ipv6/ip6_output.c:247
 dst_output include/net/dst.h:464 [inline]
 NF_HOOK include/linux/netfilter.h:318 [inline]
 ndisc_send_skb+0xa85/0x1f50 net/ipv6/ndisc.c:512
 ndisc_send_ns+0xc6/0x140 net/ipv6/ndisc.c:670
 addrconf_dad_work+0xbc9/0x14e0 net/ipv6/addrconf.c:4282
 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263
page last free pid 5848 tgid 5848 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1394 [inline]
 __free_frozen_pages+0x7df/0x1160 mm/page_alloc.c:2906
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4d/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:352
 kasan_slab_alloc include/linux/kasan.h:252 [inline]
 slab_post_alloc_hook mm/slub.c:4946 [inline]
 slab_alloc_node mm/slub.c:5245 [inline]
 kmem_cache_alloc_noprof+0x250/0x6e0 mm/slub.c:5252
 getname_flags.part.0+0x4c/0x550 fs/namei.c:146
 getname_flags+0x93/0xf0 include/linux/audit.h:345
 getname include/linux/fs.h:2916 [inline]
 do_sys_openat2+0xb8/0x1d0 fs/open.c:1431
 do_sys_open fs/open.c:1452 [inline]
 __do_sys_openat fs/open.c:1468 [inline]
 __se_sys_openat fs/open.c:1463 [inline]
 __x64_sys_openat+0x174/0x210 fs/open.c:1463
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4e0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff888076fbe000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888076fbe080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff888076fbe100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                              ^
 ffff888076fbe180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888076fbe200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================