Extracting prog: 16m47.974701531s Minimizing prog: 28m29.552804725s Simplifying prog options: 4m29.080599164s Extracting C: 48.681778175s Simplifying C: 0s extracting reproducer from 38 programs testing a last program of every proc single: executing 8 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-ftruncate-finit_module-socket$inet_udp-socket$inet_udp-setsockopt$SO_TIMESTAMPING-bind$inet-connect$inet-sendmmsg-setsockopt$inet_int-setsockopt$inet_int-mmap$IORING_OFF_SQ_RING-mkdirat-mount-openat-write-timer_create-recvmmsg-close-accept4$packet-setsockopt$packet_fanout_data-setsockopt$sock_int-recvmmsg-write$binfmt_misc-openat$procfs-mmap-select-openat$procfs-mknod-syz_open_procfs detailed listing: executing program 0: memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) (async) ftruncate(0xffffffffffffffff, 0x8007) (async) finit_module(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f00000001c0)=0x135, 0x4) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./proc\x00', 0x9d) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000000)='7', 0x1) (async) timer_create(0x2, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x45833af92e4a39df, 0x0) close(r0) (async) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14, 0x800) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0xb9, 0x4, 0xc8, 0x6}, {0x8, 0x46, 0x10, 0x3}]}, 0x10) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000040), 0xffc1) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) select(0x40, &(0x7f0000000100)={0x3, 0x400000, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x10000000000, 0x4b06, 0x80000000, 0x3}, &(0x7f00000024c0)={0x40000000000009, 0x2000000010000, 0x1, 0x6, 0x2000, 0x0, 0x0, 0x4}, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) (async) mknod(&(0x7f0000000180)='./file0\x00', 0x800, 0x7fff) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rtc-socket$nl_generic-socket$inet-mmap$IORING_OFF_SQ_RING-openat$ptmx-setsockopt$ARPT_SO_SET_REPLACE-write$binfmt_aout-ioctl$TCSETS detailed listing: executing program 0: openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x3f0, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-syz_clone-socket$netlink-socket$can_bcm-connect$can_bcm-setsockopt$inet_IP_XFRM_POLICY-sendmsg$can_bcm-writev-sched_setscheduler-socket$inet_udp-setsockopt$inet_mreqn-accept$inet-ioprio_set$pid-ioprio_get$pid-getsockopt$inet6_tcp_int-syz_usb_connect$uac2 detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_clone(0x88812700, &(0x7f00000001c0)="4592c49492bed9fdf0d2fe8425827646424917bcd48e7f1b0fea369b86f6a9b42144d7cbee65ed4c6746e02de4ae2ed86f7cd85d", 0x34, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="18f6ffe539eb343b20904a43be1bd36fdf9b1bb63df3030f219cee0606a6583c6b264a8f430a0e13a932e0abb8ccb83b0d6d68f1003165a22ca7b4887b87870b30dc71843f75ccea6a2d417204b8f52e752287a295dcfd9f4a82e7470ba011d5f540b6880af32035a8118d9cec8c7532d0f6a5c7b535f96734288a9b679b55593d640679069bc12e2a1ebfa20895fbef3b3adb01db6db6e2f96985004fe8") r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x20, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20, 0x0, 0x0, 0xee01}, {0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x1, 0x100000001}, {}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0x2, @in=@broadcast, 0x3501, 0x7, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000224e0000", 0x58}], 0x1) sched_setscheduler(r1, 0x6, &(0x7f0000000340)=0x50ee) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x3, 0x0, 0x0) accept$inet(r4, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x2a, 0x0, &(0x7f0000001e80)) syz_usb_connect$uac2(0x3, 0xdf, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x499, 0x101a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x3, 0x1, 0xb, 0x20, 0x40, {0x8, 0xb, 0x0, 0x1, 0x1, 0x4, 0x20, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0xb, 0x4f, 0x4}, [@effect_unit={0xf, 0x24, 0x7, 0x4, 0x0, 0x3, [0x0, 0x3, 0x0, 0x0]}, @selector_unit={0x9, 0x24, 0xb, 0xa7, 0x4, "3d32b1e0"}, @selector_unit={0xa, 0x24, 0xb, 0x9, 0x5, "a605872f9c"}, @mixer_unit={0x7, 0x24, 0x4, 0x6, 0x4, '\ba'}, @extension_unit={0xd, 0x24, 0x9, 0x2, 0xc3, 0x5, "6331a37aac46"}, @input_terminal={0x10, 0x24, 0x2, 0x2, 0x200, 0x6, 0x0, 0xf2, 0x8, 0x8, 0x3, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0x5, 0x9, {0x8, 0x25, 0x1, 0x80, 0x12, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3, 0x1, 0xd1, 0x0, "b9ecf219ddefe90e64"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x33, 0x1, 0x9, 0x9, "f57e", "933f9c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x9, 0x3, 0x40, {0x8, 0x25, 0x1, 0x83, 0x6c, 0x4, 0x8a}}}}}}}}]}}, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io$hid-syz_usb_control_io-ioctl$HIDIOCSUSAGES-syz_open_dev$evdev-write$char_usb detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x30, 0x8, {0x8, 0x22, "59a1b95388e8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000380)={{0x3, 0x100, 0x8, 0x7f, 0x6, 0x1}, 0x267, [0x2, 0x544, 0xffff, 0xec4, 0x1, 0x2, 0x0, 0x80, 0x3, 0x6, 0x1a, 0xe68, 0x8, 0x80, 0x6, 0x3, 0x5, 0x6, 0x3, 0xc7c0, 0x78, 0xa, 0x2f, 0xda, 0x9, 0x2, 0x9, 0x26380, 0x2, 0x6, 0xb, 0xfffffff8, 0x4, 0x8000, 0x2, 0xfffffff7, 0x75, 0x3c0, 0xa9, 0x7, 0xb, 0x5, 0x6f, 0x5, 0x0, 0x100, 0x5fa, 0xe0000000, 0xe, 0x7, 0x2, 0x4, 0xb, 0x9, 0x5, 0x3, 0x6, 0x97, 0x1, 0xfffffffe, 0x2, 0x66, 0x3, 0x3, 0x3, 0xfffffffe, 0x2, 0x0, 0x0, 0x8001, 0x0, 0x5, 0x1, 0x13b, 0x10001, 0x5, 0x50fae458, 0x5, 0x8001, 0x99b5, 0x0, 0x4, 0x7f, 0x0, 0x2, 0x3, 0x77b, 0x2, 0x6, 0x0, 0x0, 0x41f, 0x2e61, 0x10000, 0xb5, 0x1ff, 0x7d, 0x0, 0x8, 0x8, 0xba, 0x401, 0x4, 0x8, 0x7fff, 0x5, 0xffff, 0x8, 0x4, 0x6, 0x5, 0x4, 0x10, 0x4, 0x8, 0xa, 0x8, 0x9, 0x2, 0x3, 0x7fff, 0xfffffffe, 0x3, 0x9, 0x9, 0x0, 0x1, 0x3, 0xff, 0xa8df, 0x1ff, 0x22d1a543, 0x6, 0x2, 0x3ff, 0x98d, 0xb, 0xff, 0x9, 0x3, 0x200, 0x6, 0x4, 0xffffffc4, 0xffffffff, 0x1, 0x80000001, 0x1dacb008, 0x9, 0x9ab, 0xca, 0x200, 0x1000, 0x8, 0x4, 0x6, 0x6c7a, 0x5, 0x7, 0x100, 0x5, 0x3, 0xd, 0xb8f, 0x200, 0xc, 0x7, 0x0, 0x6, 0xc1, 0x7, 0x2, 0x10, 0x2, 0xffffffff, 0xffffff63, 0x9, 0x10001, 0x7, 0x8, 0x9, 0xe145, 0xffffffff, 0x4, 0x1, 0x8, 0x9046, 0x0, 0x238000, 0x4, 0x8, 0x7f, 0xf, 0xfffffffb, 0x6, 0x3, 0x3, 0xfffffffb, 0x5, 0x4396, 0x6, 0x400, 0x9, 0x4, 0x1, 0x2, 0x7, 0xffffff80, 0xdb2, 0x3, 0x9, 0x8, 0x3, 0xb, 0x2380, 0x7, 0x2, 0x4, 0x99, 0x4, 0x2, 0x5095f95c, 0x3612e695, 0x5, 0x1, 0x3, 0x3, 0x1, 0x4, 0x7302, 0xd, 0x9, 0x8, 0x8, 0x1, 0x7fffffff, 0x8, 0x2, 0x10, 0x78, 0x8000, 0xffffffe5, 0x9, 0x5d, 0x2, 0x400000, 0x4, 0x6451, 0xc, 0x10001, 0x8, 0x4, 0x2, 0x1, 0x0, 0x3ff, 0x8, 0x2f3cbf5, 0x6, 0x800, 0x0, 0x81, 0xe008, 0xff67, 0x1, 0x2, 0x7, 0xfffffff8, 0x9, 0x85a3, 0xcf, 0x7, 0xffffdf2b, 0x8, 0x7, 0x4, 0x8c000, 0x0, 0xff, 0x8, 0x8000, 0x8, 0x7fffffff, 0x6, 0x1417, 0xc, 0x0, 0x200, 0x2, 0x7f, 0x2, 0x200, 0x101, 0x0, 0x2, 0xfff, 0x3ff, 0x0, 0x5, 0x200, 0x5, 0x1, 0x5, 0x1, 0x40, 0x6, 0x24, 0x0, 0x7, 0x3ff, 0xd, 0x7, 0x181b, 0x9, 0x8, 0x4, 0x9, 0x7, 0x0, 0x2, 0x3, 0x5, 0x0, 0x6, 0x10000, 0x7, 0x300, 0x3, 0x3, 0x9, 0x9, 0x4, 0xda, 0x620, 0x4, 0x7, 0x3, 0x8d, 0x7, 0xffffffff, 0x10, 0x3, 0x4, 0x2, 0x5, 0x80, 0xc96, 0x1, 0x9, 0xce, 0x31118852, 0xf, 0xfffff001, 0x8, 0xd, 0xffff, 0x2105287c, 0x1, 0x81, 0x9, 0xfffffff9, 0x0, 0x8, 0x3, 0x7ae8, 0x5, 0x5d3, 0x1f4e, 0x2, 0x3, 0x7fffffff, 0x232, 0x4, 0xfffffffc, 0x8, 0x9, 0x4, 0x8, 0x8, 0xcfc, 0x66, 0xa, 0x0, 0x7, 0xe, 0x1, 0x8ef0, 0x8, 0x1, 0xcb, 0x9, 0x1, 0xa, 0xf, 0x7, 0x51a, 0x1, 0x7, 0x7, 0x4, 0x4, 0x4, 0x0, 0x8000, 0x8, 0xf, 0xb, 0x10001, 0xffff, 0xfffffff9, 0x5, 0x11c74928, 0xe30, 0x7, 0xd6, 0x4, 0x8, 0x5, 0x1ff, 0x5, 0x200, 0xfffffffd, 0x80000000, 0x7, 0x4, 0x100000, 0x9, 0x6, 0xb66, 0x8001, 0x8801, 0x4, 0x4, 0x1, 0x1, 0x6, 0x80000000, 0xffff, 0x5, 0x1000, 0x444, 0xd, 0x0, 0x3, 0x4, 0xffff, 0x9, 0xf, 0x3ff, 0x1, 0x9, 0xbf, 0x4, 0x5, 0x8, 0x10001, 0x3, 0x5270d244, 0x6, 0xfb0e, 0x0, 0x4, 0x8, 0xbe, 0x3, 0xfff, 0xc0, 0x2cc5693b, 0x1, 0x1, 0x7, 0x7fff, 0x101, 0x40, 0xa, 0x6, 0x0, 0x3, 0x1e000000, 0xfffffff8, 0x6041, 0x0, 0xfffffffb, 0x5c4, 0x1, 0x5, 0x4, 0xf, 0x4d0, 0x9, 0x6949, 0xc, 0x769, 0x7e73b20, 0x81a9, 0x0, 0x40a, 0x8, 0x0, 0x405ec9f0, 0x7, 0xfffffff7, 0x0, 0xbd3b2ad, 0x5, 0x0, 0x7, 0x4, 0x1, 0x8, 0x80, 0x80000001, 0x8, 0x1, 0x9, 0xffff, 0x7, 0x3, 0xfff, 0xfff, 0x0, 0x9, 0x1, 0xb1, 0x1, 0x7, 0xffff2cf3, 0x2, 0x4, 0x8, 0x8, 0x3d1c, 0x401, 0x1, 0x8, 0x814c, 0x2, 0x10, 0x5, 0x5, 0x4, 0x1, 0x3, 0x3, 0xffff5eb2, 0x58b, 0x6, 0x7, 0xffffffff, 0x1, 0x14c7eed3, 0x2, 0x9, 0x1, 0x1, 0x9, 0x0, 0x7, 0x96c, 0x4, 0x2, 0x5, 0x347e, 0x8, 0x0, 0x3, 0x7, 0xa, 0xff, 0x6fa, 0x0, 0xfe, 0xd, 0x6, 0x80000001, 0x4, 0x7, 0x800, 0x7, 0x2, 0x2, 0x5, 0x80000001, 0xc, 0x9, 0x9, 0x593, 0x5, 0xffffffff, 0x0, 0x5d5, 0x9, 0x0, 0x101, 0x7, 0x80000000, 0x5, 0x100, 0x3, 0x0, 0x1, 0x2, 0x9c8, 0x8c30, 0x8, 0x3ff, 0x91, 0x2, 0x200, 0x6, 0x2, 0x3ff, 0x140, 0x3, 0xffffffff, 0xcbe4, 0x14, 0x0, 0x1e, 0xa, 0xff, 0x6, 0xfffffffe, 0x8, 0x3, 0x4, 0x5, 0x1, 0x7fffffff, 0xffff0002, 0x1, 0x7, 0x6, 0x5, 0x3ff, 0x10, 0x1, 0x9, 0x6, 0xffffff13, 0xfffffff2, 0x1, 0x1f, 0x80000000, 0x100, 0xffffff00, 0x1, 0x6, 0x4, 0x4, 0x8000, 0x401, 0x3, 0x6, 0x7fff, 0x8a2, 0x4, 0x3ff, 0x0, 0x200, 0x1, 0x4, 0x5, 0xff, 0x7fffffff, 0x2, 0x9, 0x401, 0x0, 0x3f6, 0x59, 0x1, 0x0, 0x4, 0x2, 0xbc000000, 0x7005, 0x80000001, 0x7fffffff, 0x5, 0xe6, 0x26, 0x6, 0x8, 0x8000, 0x10000, 0x7, 0x9, 0x9, 0x6, 0x3, 0x8, 0x2, 0x5, 0x2, 0x5, 0xc, 0x4, 0x9, 0x0, 0x1, 0x10000, 0x1ff, 0x400, 0x7, 0x5, 0x0, 0x1, 0x100, 0x6, 0x4, 0x7, 0x5bb, 0x5, 0x7, 0x5ac66ac4, 0x2, 0x80000001, 0x1000, 0x8, 0x8, 0x2a, 0xfff, 0x33fbd07, 0x3, 0x6, 0x100, 0xe, 0x8, 0xffff, 0xff, 0x7, 0x8, 0x7, 0xff, 0x3, 0x7c, 0xd7, 0x9, 0xf7f6, 0x6, 0x5, 0x800, 0x4, 0xffffffff, 0x8, 0x51a, 0x40, 0x8, 0x1, 0x31, 0x9, 0xd8a, 0x401, 0x7, 0x8, 0x4, 0x400, 0x619, 0x4, 0x8, 0x22df, 0x2, 0x9, 0x81, 0xfffffffa, 0x8, 0x2, 0x334, 0xfe, 0xc31, 0x8, 0x7ff, 0x7fff, 0x7f, 0x6, 0x7fffffff, 0x8, 0x1, 0xdee6, 0xa, 0xfff, 0x4, 0x0, 0x0, 0x80, 0x7ff, 0x0, 0x4, 0x2, 0x8, 0x80000001, 0x2, 0x37, 0x1, 0x5, 0x2, 0x6, 0xff, 0x1, 0x7db8, 0x8, 0x9, 0x8, 0x9, 0x3ff, 0xfffffff9, 0x17dc, 0x7, 0xd2fa, 0xffff, 0x7fff, 0x1ff, 0x6e, 0x6, 0xc8ff, 0xea2, 0x9, 0x5, 0x6, 0xb8, 0x8, 0xffffffff, 0x4, 0x6, 0x8, 0x2, 0x7ff, 0xffff, 0x8, 0x9281, 0x2, 0x7, 0x1, 0xc6, 0x4, 0x4, 0x9, 0x10ba7323, 0x9239, 0x5, 0x8, 0x80, 0x2, 0xabc, 0x54be, 0x7, 0x5, 0x994, 0x80000001, 0x8, 0x3, 0xb, 0x40, 0x4, 0x6, 0x8000, 0x8, 0x3, 0x10, 0x100, 0xb76, 0x8, 0xa, 0x3, 0xa, 0x65c3, 0xffffffe5, 0x4, 0xfffffffe, 0x400, 0xe, 0x8, 0x5, 0x6, 0x9a, 0x80000000, 0xfffffffe, 0xaba, 0x4d, 0x2, 0x4, 0x400, 0x3ff, 0x5, 0x0, 0x4, 0xfffff801, 0x3, 0x9, 0x3, 0x6408, 0x2, 0x2, 0x1, 0x8, 0x2, 0x1, 0xe, 0x9, 0x2, 0x7, 0x6, 0xfff, 0x9, 0x1, 0x6d4d, 0x9, 0x400, 0x4, 0x5b, 0x400, 0xae0, 0x6e, 0x0, 0x3, 0x1, 0x0, 0x5, 0x2a38000, 0x7, 0x171, 0x1, 0x3, 0x4, 0xa1c, 0x8, 0x1000, 0x40, 0x80, 0xfffffffa, 0x4d753a7d, 0xb0c00, 0x1, 0x81, 0x8, 0x4, 0x31af, 0x1, 0x5, 0x400, 0x7, 0x75e, 0x5, 0x1, 0x4, 0x61, 0x1, 0x8, 0x2, 0x1, 0xfffffff8, 0x9, 0x6621, 0x9, 0x3, 0x9, 0xfffffffe, 0x7, 0x6, 0x8, 0xb7, 0x0, 0x5, 0xa, 0x3, 0x1499ffd3, 0xc, 0x7fffffff, 0x7fff, 0x5, 0xf, 0x200000, 0x1, 0xe0000, 0x3, 0x5, 0x6, 0x800, 0x40, 0x0, 0x81, 0x4, 0x9, 0x5, 0xfffffff7, 0x2d7, 0xffffffcc, 0x2, 0xfffffffd, 0xfff, 0x7ff, 0x6, 0x5, 0x8e, 0x9, 0x18d76825, 0x2, 0x6, 0x0, 0x1000, 0x838, 0xc00000, 0xcc3, 0x2, 0x4, 0x4, 0xd541, 0x800, 0x401, 0xcdb, 0x200, 0x81, 0x6, 0x5, 0x16000, 0xf787, 0x4, 0xb0000000, 0x2, 0xce5, 0x7fff, 0x3, 0x80000001]}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BTRFS_IOC_BALANCE_PROGRESS-syz_usb_connect$midi detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000206307122040000102030109021200010d0e503f09040000000103"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BTRFS_IOC_BALANCE_PROGRESS-syz_usb_connect$midi detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000206307122040000102030109021200010d0e503f09040000000103"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capget-syz_usb_connect$midi detailed listing: executing program 0: capget(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x5, 0x6, 0x5, 0x2, 0x80000000, 0x2}) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x763, 0x2012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xe, 0x50, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20}}}}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capget-syz_usb_connect$midi detailed listing: executing program 0: capget(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x5, 0x6, 0x5, 0x2, 0x80000000, 0x2}) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x763, 0x2012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xe, 0x50, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20}}}}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) program did not crash single: failed to extract reproducer bisect: bisecting 38 programs with base timeout 30s testing program (duration=39s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8, 10, 6, 26, 21, 30, 11, 2, 2, 23, 3, 3, 3, 8, 29, 5, 1, 8, 16, 10, 8, 14, 7, 12, 8, 18, 2, 12, 14, 12, 6, 8, 6, 22, 16, 8, 30] detailed listing: executing program 2: r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000100)={'raw\x00', 0x2, [{}, {}]}, 0x48) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000700)={0x8f, 0x0, 0xb}) r3 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r3, &(0x7f00000004c0)={0x0, 0x0}) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x2004402, &(0x7f0000000140)=ANY=[@ANYBLOB="3a114e5759347a822c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',noxattr,\x00']) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000001c40)={'ipvs\x00'}, &(0x7f0000001c80)=0x1e) sendmsg$AUDIT_TTY_GET(r2, 0x0, 0x14) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000000)=ANY=[], 0x0) executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x10, {{@in=@broadcast, @in=@loopback, 0x4e22, 0xd3a, 0xffff, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x2, 0x9, 0x80}}, [@tmpl={0xc4, 0x5, [{{@in6=@private0, 0x0, 0x3c}, 0x0, @in=@remote, 0x34ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6e}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, 0x0, 0x3c}, 0x0, @in6=@loopback, 0xfffffffd, 0x2, 0x3, 0x0, 0x7, 0x800, 0x2}, {{@in=@multicast1, 0x4d4, 0x2b}, 0x2, @in=@local, 0x4, 0x4, 0x1, 0x7, 0x0, 0x0, 0x400}]}]}, 0x17c}}, 0x80c4) r1 = socket$inet6(0xa, 0x1, 0x0) close(0x3) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000008fcff", 0xfffffffffffffd23}], 0x1) socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000880)=0x40005, 0x4) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffbffffbe, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @private1, 0x6}, 0x1c) executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) accept$unix(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x1214864, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180), 0x224802, &(0x7f00000002c0)={[{@xino_auto, 0x3a}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@smackfshat={'smackfshat', 0x3d, 'mask'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@subj_role={'subj_role', 0x3d, ',\\\x97!##.#$-!-}$@,'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@dont_hash}], 0x2f}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)='$\x00\x00', 0x3}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x0, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x7, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x8000001, 0x5, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0xa, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x5, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x51) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) (async) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="1a040500c7ff03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r9, 0x1, 0x6, 0x6, @remote}, 0x14) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, 0x14, 0x1, 0x4, 0x25dfdbfe, {0x2}, [@typed={0x4}, @nested={0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') creat(&(0x7f0000000240)='./file1\x00', 0x0) fstat(0xffffffffffffffff, 0x0) lstat(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)) r1 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000540)=ANY=[@ANYBLOB="120100020000002082052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a00000b7f00090401efff01022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}}, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000480)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, 0x0) clock_nanosleep(0x1, 0x0, 0x0, 0x0) syz_usb_connect$uac2(0x0, 0x8b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000020532b2300400001020301090279000301fb4004080b02010103200109040000000101200009240108000c1900e508240a00040b060308240a0901030602090401000001022000090401010101022000090501"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x16b3, [{0x0, &(0x7f0000000080)=@lang_id={0x0, 0x3, 0x422}}, {0x0, &(0x7f00000000c0)=@string={0x0, 0x3, "cf6f39ef6bd8a0ab15f5e41d648876807d0e021e540b9b6c3bb530e121c652bb153767e06cca6d9b2ce82ed99c59f3c2e890aa26961507154e1ce5c5b091ba08e89d27f80f3cd02da279a4707137f7b3af6af9253a1974cd982b20ae7b37dec6526132257c8286c9bc7d9ff81e09e5431fac51f7e7b72e70f33135f393769d7e2c8167196acf90a260bdf09d16b21c190bddb25dedee04dff89b3a573d3c54e3cde345c2e688f53170b48d8eb2d9934ff6ac25c64f635d396dd7941f3fd61fb99b"}}]}) executing program 2: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000080)) (async, rerun: 64) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x100, r1, 0x301, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "327c42b6644a052df4593e78acbac5bc262b5f600fbd24a94f"}}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa56}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x8801) (async, rerun: 32) r2 = syz_open_dev$hidraw(&(0x7f00000002c0), 0x771f, 0x101440) (rerun: 32) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000300)="90d687d97bd243a3949473c653327da09844325884336a039682d6bf2e1654c0d28d4d92d5de0dcce8791add99111558f41767b9e7866b28b26f60accd09c763e8ebd40bd2d8501568839be6911853eca109826910943e66ac874b9ee08531943267fac7781e51bf900e7e2423778581e605a1b456eff8ff5859edcb2756ec5b842d7c88291ca7800a7014fb263afc2bc07d69cf5f52ed11d56a4e9443079a3cfe0c55c50c7c8b695024") r3 = syz_open_dev$hiddev(&(0x7f00000003c0), 0x1, 0x100) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000000400)={0x1, 0x3, 0x400}) (async) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3) (async) ioctl$KVM_GET_SREGS2(0xffffffffffffffff, 0x8140aecc, &(0x7f0000000440)) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000580)) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xfeac7ef430d44c4b}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x118, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffa}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x10}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40014}, 0x4000000) (async) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000800)='devices.list\x00', 0x0, 0x0) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, 0xfffffffffffffffd) (async) ioctl$TIOCGISO7816(r7, 0x80285442, &(0x7f0000000840)) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x6c, r6, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44}, 0x400) (async) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f00000009c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0xb5, 0x40, 0x4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '!'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x8, 0xd0, 0x6}, {0x6, 0x24, 0x1a, 0x2, 0x10}, [@acm={0x4, 0x24, 0x2, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0xfe, 0x1d, 0x2, 0x80}, @mbim={0xc, 0x24, 0x1b, 0xd, 0x74, 0x7f, 0x8, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x4, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x87, 0x1c, 0x1}}}}}}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x300, 0x9, 0x3, 0x9a, 0x40, 0x4}, 0xc9, &(0x7f0000000ac0)={0x5, 0xf, 0xc9, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x4, 0x1, 0x2}, @generic={0xba, 0x10, 0x3, "7dbb6718e270f52b4dc95e98b3c377f7faf551d5a54896bb392c2b59addc32f3dc325c0fb28f84045b0a9da7ed070ef5d9eb7d8ee8bc06a7450a280e801a869f79b486e2e8b94910687875837314279512da49a644a1f7cd7fd4d14c308a3818abdb35e7ef41679d3fa57c41134b560aa762cc92bbedec329b615beb744d2afc98d8ae9509c9debbbf7166ebf1dab013af39f6f63ca07b792ae60d74877e332d9069847628389b924e8e5060f39aa4c0f6eeb1ff828348"}]}, 0x5, [{0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x415}}, {0x7b, &(0x7f0000000c40)=@string={0x7b, 0x3, "1a5a05d2de756fd29453f0485a1a740505096f3527cf5cc0edd856ab7f8efed89f2e40dd58c7eff6848e210efc30fc0f984ea08a0a39228eca7a0520a7dd69b17752321a5ad208296878298560bbd9a59c87a3a67a58a268d22c583d89da1b4819706b9ad85a32a2a4ab2da32c1e8c68001534e90f93750b63"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x400a}}, {0xc4, &(0x7f0000000d00)=@string={0xc4, 0x3, "addeeb3feb91cb45594862a916871b557a1cea8133f3efb0725337a6637e866bd0231f1faf3d530b1002d6b8a09832e51d5b0f3acdcb82bde553afaf27f9b9a7b0530d94dd5d5550ead46b4b3b0fc5e3c98d89b05bef6818df0f32d839cc4a728963c7633653b3801ba1f58b08f1d2380b18475f9b3eddc17fbb2a872783caaf2042427356343235902e4490e3eb52f3918a6f62e289e054525c2114a40de55f08bae87275422eee7de8cb3971a43dd66c375abbfd54706d61741f4f54bca8ad9a1a"}}]}) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r8, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '{\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10008015}, 0x6000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000001140)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x48, r9, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x756, 0x6a}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008810}, 0x20008004) read$ptp(r7, &(0x7f0000001180)=""/209, 0xd1) (async, rerun: 32) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000012c0), 0xffffffffffffffff) (rerun: 32) sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x74, r11, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x18000000}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x10040010) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008890}, 0x0) (rerun: 32) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f0000000040)='./file2\x00', 0x0, 0xf3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x4c01, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) close(r1) executing program 0: capget(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x5, 0x6, 0x5, 0x2, 0x80000000, 0x2}) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x763, 0x2012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xe, 0x50, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20}}}}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) executing program 32: capget(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x5, 0x6, 0x5, 0x2, 0x80000000, 0x2}) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x763, 0x2012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xe, 0x50, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20}}}}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "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"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001"], 0x50}}, 0x0) read$rfkill(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000000)={0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r4, &(0x7f0000000000)="ff", 0x1001, 0x100000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="eaffff00000000ff"], 0x0}, 0x0) executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x3, 0xfffffffc, 0x3, 0x8}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000300)={0x4, 0x9dc5, 0x1fd, 0x0, 0x3}) executing program 2: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000206307122040000102030109021200010d0e503f09040000000103"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) executing program 33: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000206307122040000102030109021200010d0e503f09040000000103"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) executing program 5: openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x3f0, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, 0x0) executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x4e20, 0x0, 0x4e20, 0xfffc, 0x2, 0x20, 0x0, 0x89, 0x0, 0xffffffffffffffff}, {0x0, 0x7d, 0xad8, 0x7570e41c, 0x1, 0x80000000, 0x1, 0x3}, {0x6, 0x4, 0x5, 0x7}, 0x80000000, 0x6e6bb5}, {{@in6=@private1, 0x4d4, 0xff}, 0xa, @in6=@empty, 0x3503, 0x2, 0x0, 0xfd, 0xa398baf, 0x6, 0x5}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) symlink(&(0x7f0000003440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000002280)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000002180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000405804055000000000000109022400010000f07e09040000020300020009210500000122eb00090581031000fc0000"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_buf(r4, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="16000000ea00010400000000000000000a00000408001a4000000001bb92fd80ab22043d113f5b1b1641a55a31d4227ab16c971ce0e46ddfb704e84e9ca1c06f49dd654f1e1f51d1a47a7c9fb92ca51170070000004f314085abdeed6e47cb78581b9aaadd5c63dff2b22ee3fc90e6b923cafa04c5cca5ab89b99f1401a9bfca1057e670c72c21d634ec2912bd54622199637086fee1598e4498b8ce7a8db76e775280f8c0c7159c39c96d0ac7626784b964dfdd38e7d2caaaca9c519402f2c0de2b65f7342ab753"], 0x1c}}, 0x4000) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f00000002c0), 0x4) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f0000000340)=[{r3, 0x8010}, {r2, 0x8020}, {r10, 0x320}, {r12}, {r3, 0x8031}, {r13, 0x130}, {r1, 0x22}, {r13, 0x112}, {r1, 0x1}, {r11, 0x400}], 0xa, &(0x7f00000003c0)={0x0, 0x3938700}, &(0x7f0000000400)={[0x5]}, 0x8) r16 = dup(r15) syz_ublk_setup_queues(r16, r14, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) executing program 4: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f0000000040)='./file2\x00', 0x0, 0xf3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x4c01, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file2\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@afid={'afid', 0x3d, 0x1}}, {@version_9p2000}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, '$%'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x63, 0x35, 0x30, 0x61, 0x33, 0x35, 0x34], 0x2d, [0x33, 0x32, 0x30, 0x65], 0x2d, [0x39, 0x30, 0x65, 0x36], 0x2d, [0x33, 0x32, 0x38, 0x65], 0x2d, [0x62, 0x32, 0x3f, 0x31, 0x65, 0x32, 0x32, 0x65]}}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@seclabel}, {@obj_role={'obj_role', 0x3d, '!'}}, {@fsname}]}}) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) executing program 1: syz_usb_connect$uac2(0x0, 0x98, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000083512028040000102030109028600030180e007080b010101000000010120000924010200032600c511240806060000020002000200feff03000c2403fd0004a80206f9ff0a09040100000102200009040101010102200009050101400005040008250181090902000904020000010220000904023c46e8d9367ac2caea551c828ef8fafd01110102200009058209ff0305040208250183000a02000000000000"], 0x0) executing program 5: openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x3f0, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, 0x0) executing program 4: futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003500)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="240000000000000000000000070000008606"], 0x28}}], 0x1, 0x8090) (async) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) (async) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @empty, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) (async) recvmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/79, 0x15}, 0x7ffffffc}], 0x1, 0x2040, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000005f000100080031000000000000000000", @ANYRES64=r2], 0x20}], 0x1, 0x0, 0x0, 0x4040040}, 0x20000000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) creat(&(0x7f0000000040)='./file0\x00', 0x8) (async) fstat(r3, 0x0) executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8f, 0x0, @mcast2, @mcast1, 0x80, 0x700, 0x0, 0x20000000}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_clone3(&(0x7f0000000200)={0x40000000, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000040)=0xfff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0xc, 0x0, 0xfec00000, 0x0, &(0x7f0000000000/0x1000)=nil}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@code={0xa, 0x18, {"b80000c0fe3acb80"}}], 0xd3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) executing program 5: openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x3f0, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, 0x0) executing program 4: socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f00000004c0)={0x0, 0xbd, 0x800, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000040)={0xc0, 0x0, 0x10000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x11, r2, 0x40000) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, r3, 0x0, 0x0) executing program 3: r0 = userfaultfd(0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x181}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032bbd7000ffdbdf2501000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x4c890}, 0x44) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r3, 0x3000) executing program 5: openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x3f0, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, 0x0) executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x80108907, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="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", 0xdea}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) ioctl$KVM_RUN(r1, 0xae80, 0x0) executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffc, 0x1fc1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xffffffff, 0x1, &(0x7f0000000300)={0x4b5a9da54893e123, 0x1, 0x2, 0x1, 0xfffc}, 0x8, 0x0, 0x1000000, 0x0, 0x3, 0x0, 0x0}) executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x3e, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x8, 0x2, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = dup(r1) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd5) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1, 0x2172, 0xffffffffffffffff, 0x5ef5c000) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)={0x40, 0x7, 0x28, {0x28, 0x22, "441cb9917a13fb26d947232a22fa21eba2880e5beacc06643c5357ca953a30654178a7fc446d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x8) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x15, 0x0, &(0x7f0000000080)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="080075e700"}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x7e) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x7ff}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000040)=ANY=[@ANYBLOB="a1"]) add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, &(0x7f0000000780)="df6556a8", 0x4, 0xfffffffffffffffe) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0xaa0c1fb6921c1e66, 0x800, 0x0, 0x3}, 0x20) r2 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x8000000001cb, 0x12) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x408c0}, 0x20004080) executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x30, 0x8, {0x8, 0x22, "59a1b95388e8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000380)={{0x3, 0x100, 0x8, 0x7f, 0x6, 0x1}, 0x267, [0x2, 0x544, 0xffff, 0xec4, 0x1, 0x2, 0x0, 0x80, 0x3, 0x6, 0x1a, 0xe68, 0x8, 0x80, 0x6, 0x3, 0x5, 0x6, 0x3, 0xc7c0, 0x78, 0xa, 0x2f, 0xda, 0x9, 0x2, 0x9, 0x26380, 0x2, 0x6, 0xb, 0xfffffff8, 0x4, 0x8000, 0x2, 0xfffffff7, 0x75, 0x3c0, 0xa9, 0x7, 0xb, 0x5, 0x6f, 0x5, 0x0, 0x100, 0x5fa, 0xe0000000, 0xe, 0x7, 0x2, 0x4, 0xb, 0x9, 0x5, 0x3, 0x6, 0x97, 0x1, 0xfffffffe, 0x2, 0x66, 0x3, 0x3, 0x3, 0xfffffffe, 0x2, 0x0, 0x0, 0x8001, 0x0, 0x5, 0x1, 0x13b, 0x10001, 0x5, 0x50fae458, 0x5, 0x8001, 0x99b5, 0x0, 0x4, 0x7f, 0x0, 0x2, 0x3, 0x77b, 0x2, 0x6, 0x0, 0x0, 0x41f, 0x2e61, 0x10000, 0xb5, 0x1ff, 0x7d, 0x0, 0x8, 0x8, 0xba, 0x401, 0x4, 0x8, 0x7fff, 0x5, 0xffff, 0x8, 0x4, 0x6, 0x5, 0x4, 0x10, 0x4, 0x8, 0xa, 0x8, 0x9, 0x2, 0x3, 0x7fff, 0xfffffffe, 0x3, 0x9, 0x9, 0x0, 0x1, 0x3, 0xff, 0xa8df, 0x1ff, 0x22d1a543, 0x6, 0x2, 0x3ff, 0x98d, 0xb, 0xff, 0x9, 0x3, 0x200, 0x6, 0x4, 0xffffffc4, 0xffffffff, 0x1, 0x80000001, 0x1dacb008, 0x9, 0x9ab, 0xca, 0x200, 0x1000, 0x8, 0x4, 0x6, 0x6c7a, 0x5, 0x7, 0x100, 0x5, 0x3, 0xd, 0xb8f, 0x200, 0xc, 0x7, 0x0, 0x6, 0xc1, 0x7, 0x2, 0x10, 0x2, 0xffffffff, 0xffffff63, 0x9, 0x10001, 0x7, 0x8, 0x9, 0xe145, 0xffffffff, 0x4, 0x1, 0x8, 0x9046, 0x0, 0x238000, 0x4, 0x8, 0x7f, 0xf, 0xfffffffb, 0x6, 0x3, 0x3, 0xfffffffb, 0x5, 0x4396, 0x6, 0x400, 0x9, 0x4, 0x1, 0x2, 0x7, 0xffffff80, 0xdb2, 0x3, 0x9, 0x8, 0x3, 0xb, 0x2380, 0x7, 0x2, 0x4, 0x99, 0x4, 0x2, 0x5095f95c, 0x3612e695, 0x5, 0x1, 0x3, 0x3, 0x1, 0x4, 0x7302, 0xd, 0x9, 0x8, 0x8, 0x1, 0x7fffffff, 0x8, 0x2, 0x10, 0x78, 0x8000, 0xffffffe5, 0x9, 0x5d, 0x2, 0x400000, 0x4, 0x6451, 0xc, 0x10001, 0x8, 0x4, 0x2, 0x1, 0x0, 0x3ff, 0x8, 0x2f3cbf5, 0x6, 0x800, 0x0, 0x81, 0xe008, 0xff67, 0x1, 0x2, 0x7, 0xfffffff8, 0x9, 0x85a3, 0xcf, 0x7, 0xffffdf2b, 0x8, 0x7, 0x4, 0x8c000, 0x0, 0xff, 0x8, 0x8000, 0x8, 0x7fffffff, 0x6, 0x1417, 0xc, 0x0, 0x200, 0x2, 0x7f, 0x2, 0x200, 0x101, 0x0, 0x2, 0xfff, 0x3ff, 0x0, 0x5, 0x200, 0x5, 0x1, 0x5, 0x1, 0x40, 0x6, 0x24, 0x0, 0x7, 0x3ff, 0xd, 0x7, 0x181b, 0x9, 0x8, 0x4, 0x9, 0x7, 0x0, 0x2, 0x3, 0x5, 0x0, 0x6, 0x10000, 0x7, 0x300, 0x3, 0x3, 0x9, 0x9, 0x4, 0xda, 0x620, 0x4, 0x7, 0x3, 0x8d, 0x7, 0xffffffff, 0x10, 0x3, 0x4, 0x2, 0x5, 0x80, 0xc96, 0x1, 0x9, 0xce, 0x31118852, 0xf, 0xfffff001, 0x8, 0xd, 0xffff, 0x2105287c, 0x1, 0x81, 0x9, 0xfffffff9, 0x0, 0x8, 0x3, 0x7ae8, 0x5, 0x5d3, 0x1f4e, 0x2, 0x3, 0x7fffffff, 0x232, 0x4, 0xfffffffc, 0x8, 0x9, 0x4, 0x8, 0x8, 0xcfc, 0x66, 0xa, 0x0, 0x7, 0xe, 0x1, 0x8ef0, 0x8, 0x1, 0xcb, 0x9, 0x1, 0xa, 0xf, 0x7, 0x51a, 0x1, 0x7, 0x7, 0x4, 0x4, 0x4, 0x0, 0x8000, 0x8, 0xf, 0xb, 0x10001, 0xffff, 0xfffffff9, 0x5, 0x11c74928, 0xe30, 0x7, 0xd6, 0x4, 0x8, 0x5, 0x1ff, 0x5, 0x200, 0xfffffffd, 0x80000000, 0x7, 0x4, 0x100000, 0x9, 0x6, 0xb66, 0x8001, 0x8801, 0x4, 0x4, 0x1, 0x1, 0x6, 0x80000000, 0xffff, 0x5, 0x1000, 0x444, 0xd, 0x0, 0x3, 0x4, 0xffff, 0x9, 0xf, 0x3ff, 0x1, 0x9, 0xbf, 0x4, 0x5, 0x8, 0x10001, 0x3, 0x5270d244, 0x6, 0xfb0e, 0x0, 0x4, 0x8, 0xbe, 0x3, 0xfff, 0xc0, 0x2cc5693b, 0x1, 0x1, 0x7, 0x7fff, 0x101, 0x40, 0xa, 0x6, 0x0, 0x3, 0x1e000000, 0xfffffff8, 0x6041, 0x0, 0xfffffffb, 0x5c4, 0x1, 0x5, 0x4, 0xf, 0x4d0, 0x9, 0x6949, 0xc, 0x769, 0x7e73b20, 0x81a9, 0x0, 0x40a, 0x8, 0x0, 0x405ec9f0, 0x7, 0xfffffff7, 0x0, 0xbd3b2ad, 0x5, 0x0, 0x7, 0x4, 0x1, 0x8, 0x80, 0x80000001, 0x8, 0x1, 0x9, 0xffff, 0x7, 0x3, 0xfff, 0xfff, 0x0, 0x9, 0x1, 0xb1, 0x1, 0x7, 0xffff2cf3, 0x2, 0x4, 0x8, 0x8, 0x3d1c, 0x401, 0x1, 0x8, 0x814c, 0x2, 0x10, 0x5, 0x5, 0x4, 0x1, 0x3, 0x3, 0xffff5eb2, 0x58b, 0x6, 0x7, 0xffffffff, 0x1, 0x14c7eed3, 0x2, 0x9, 0x1, 0x1, 0x9, 0x0, 0x7, 0x96c, 0x4, 0x2, 0x5, 0x347e, 0x8, 0x0, 0x3, 0x7, 0xa, 0xff, 0x6fa, 0x0, 0xfe, 0xd, 0x6, 0x80000001, 0x4, 0x7, 0x800, 0x7, 0x2, 0x2, 0x5, 0x80000001, 0xc, 0x9, 0x9, 0x593, 0x5, 0xffffffff, 0x0, 0x5d5, 0x9, 0x0, 0x101, 0x7, 0x80000000, 0x5, 0x100, 0x3, 0x0, 0x1, 0x2, 0x9c8, 0x8c30, 0x8, 0x3ff, 0x91, 0x2, 0x200, 0x6, 0x2, 0x3ff, 0x140, 0x3, 0xffffffff, 0xcbe4, 0x14, 0x0, 0x1e, 0xa, 0xff, 0x6, 0xfffffffe, 0x8, 0x3, 0x4, 0x5, 0x1, 0x7fffffff, 0xffff0002, 0x1, 0x7, 0x6, 0x5, 0x3ff, 0x10, 0x1, 0x9, 0x6, 0xffffff13, 0xfffffff2, 0x1, 0x1f, 0x80000000, 0x100, 0xffffff00, 0x1, 0x6, 0x4, 0x4, 0x8000, 0x401, 0x3, 0x6, 0x7fff, 0x8a2, 0x4, 0x3ff, 0x0, 0x200, 0x1, 0x4, 0x5, 0xff, 0x7fffffff, 0x2, 0x9, 0x401, 0x0, 0x3f6, 0x59, 0x1, 0x0, 0x4, 0x2, 0xbc000000, 0x7005, 0x80000001, 0x7fffffff, 0x5, 0xe6, 0x26, 0x6, 0x8, 0x8000, 0x10000, 0x7, 0x9, 0x9, 0x6, 0x3, 0x8, 0x2, 0x5, 0x2, 0x5, 0xc, 0x4, 0x9, 0x0, 0x1, 0x10000, 0x1ff, 0x400, 0x7, 0x5, 0x0, 0x1, 0x100, 0x6, 0x4, 0x7, 0x5bb, 0x5, 0x7, 0x5ac66ac4, 0x2, 0x80000001, 0x1000, 0x8, 0x8, 0x2a, 0xfff, 0x33fbd07, 0x3, 0x6, 0x100, 0xe, 0x8, 0xffff, 0xff, 0x7, 0x8, 0x7, 0xff, 0x3, 0x7c, 0xd7, 0x9, 0xf7f6, 0x6, 0x5, 0x800, 0x4, 0xffffffff, 0x8, 0x51a, 0x40, 0x8, 0x1, 0x31, 0x9, 0xd8a, 0x401, 0x7, 0x8, 0x4, 0x400, 0x619, 0x4, 0x8, 0x22df, 0x2, 0x9, 0x81, 0xfffffffa, 0x8, 0x2, 0x334, 0xfe, 0xc31, 0x8, 0x7ff, 0x7fff, 0x7f, 0x6, 0x7fffffff, 0x8, 0x1, 0xdee6, 0xa, 0xfff, 0x4, 0x0, 0x0, 0x80, 0x7ff, 0x0, 0x4, 0x2, 0x8, 0x80000001, 0x2, 0x37, 0x1, 0x5, 0x2, 0x6, 0xff, 0x1, 0x7db8, 0x8, 0x9, 0x8, 0x9, 0x3ff, 0xfffffff9, 0x17dc, 0x7, 0xd2fa, 0xffff, 0x7fff, 0x1ff, 0x6e, 0x6, 0xc8ff, 0xea2, 0x9, 0x5, 0x6, 0xb8, 0x8, 0xffffffff, 0x4, 0x6, 0x8, 0x2, 0x7ff, 0xffff, 0x8, 0x9281, 0x2, 0x7, 0x1, 0xc6, 0x4, 0x4, 0x9, 0x10ba7323, 0x9239, 0x5, 0x8, 0x80, 0x2, 0xabc, 0x54be, 0x7, 0x5, 0x994, 0x80000001, 0x8, 0x3, 0xb, 0x40, 0x4, 0x6, 0x8000, 0x8, 0x3, 0x10, 0x100, 0xb76, 0x8, 0xa, 0x3, 0xa, 0x65c3, 0xffffffe5, 0x4, 0xfffffffe, 0x400, 0xe, 0x8, 0x5, 0x6, 0x9a, 0x80000000, 0xfffffffe, 0xaba, 0x4d, 0x2, 0x4, 0x400, 0x3ff, 0x5, 0x0, 0x4, 0xfffff801, 0x3, 0x9, 0x3, 0x6408, 0x2, 0x2, 0x1, 0x8, 0x2, 0x1, 0xe, 0x9, 0x2, 0x7, 0x6, 0xfff, 0x9, 0x1, 0x6d4d, 0x9, 0x400, 0x4, 0x5b, 0x400, 0xae0, 0x6e, 0x0, 0x3, 0x1, 0x0, 0x5, 0x2a38000, 0x7, 0x171, 0x1, 0x3, 0x4, 0xa1c, 0x8, 0x1000, 0x40, 0x80, 0xfffffffa, 0x4d753a7d, 0xb0c00, 0x1, 0x81, 0x8, 0x4, 0x31af, 0x1, 0x5, 0x400, 0x7, 0x75e, 0x5, 0x1, 0x4, 0x61, 0x1, 0x8, 0x2, 0x1, 0xfffffff8, 0x9, 0x6621, 0x9, 0x3, 0x9, 0xfffffffe, 0x7, 0x6, 0x8, 0xb7, 0x0, 0x5, 0xa, 0x3, 0x1499ffd3, 0xc, 0x7fffffff, 0x7fff, 0x5, 0xf, 0x200000, 0x1, 0xe0000, 0x3, 0x5, 0x6, 0x800, 0x40, 0x0, 0x81, 0x4, 0x9, 0x5, 0xfffffff7, 0x2d7, 0xffffffcc, 0x2, 0xfffffffd, 0xfff, 0x7ff, 0x6, 0x5, 0x8e, 0x9, 0x18d76825, 0x2, 0x6, 0x0, 0x1000, 0x838, 0xc00000, 0xcc3, 0x2, 0x4, 0x4, 0xd541, 0x800, 0x401, 0xcdb, 0x200, 0x81, 0x6, 0x5, 0x16000, 0xf787, 0x4, 0xb0000000, 0x2, 0xce5, 0x7fff, 0x3, 0x80000001]}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) executing program 5: openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x3f0, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, 0x0) executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000004c0)='./file1\x00', 0x5) r1 = add_key$fscrypt_v1(&(0x7f0000002280), &(0x7f00000022c0)={'fscrypt:', @desc2}, &(0x7f0000002300)={0x0, "2a4cea898139e0e0c019a74d3ea26dd02e4c241b97774cc682857eed746418339edb88181d7a65049884e401847aef386af7be95cb8e40e633ea34c59d08c962", 0x27}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r1, 0x0, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x6a) executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000140)=@ethtool_rxfh_indir={0x39, 0x3, [0x5, 0x3ff, 0xffffffff]}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000180)=0x2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000280)={0x3ff}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007fe000/0x800000)=nil) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x47, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0x6, 0x8, 0x8000000000080, 0x25, 0x80000, 0x7f, 0x44236, 0x800, 0x81, 0x4, 0x8001, 0x1005, 0xd, 0xb2e, 0x0, 0xfffffdfffffffffd], 0xe000, 0xe8980}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r7, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/89, 0x59}], 0x1}, 0xc0000}], 0x1, 0x40010112, 0x0) capget(&(0x7f0000000000)={0x19980330}, &(0x7f00000000c0)={0x5, 0x8, 0x4, 0x8, 0x2b9e, 0xd75}) executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_clone(0x88812700, &(0x7f00000001c0)="4592c49492bed9fdf0d2fe8425827646424917bcd48e7f1b0fea369b86f6a9b42144d7cbee65ed4c6746e02de4ae2ed86f7cd85d", 0x34, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="18f6ffe539eb343b20904a43be1bd36fdf9b1bb63df3030f219cee0606a6583c6b264a8f430a0e13a932e0abb8ccb83b0d6d68f1003165a22ca7b4887b87870b30dc71843f75ccea6a2d417204b8f52e752287a295dcfd9f4a82e7470ba011d5f540b6880af32035a8118d9cec8c7532d0f6a5c7b535f96734288a9b679b55593d640679069bc12e2a1ebfa20895fbef3b3adb01db6db6e2f96985004fe8") r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x20, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20, 0x0, 0x0, 0xee01}, {0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x1, 0x100000001}, {}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0x2, @in=@broadcast, 0x3501, 0x7, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000224e0000", 0x58}], 0x1) sched_setscheduler(r1, 0x6, &(0x7f0000000340)=0x50ee) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x3, 0x0, 0x0) accept$inet(r4, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x2a, 0x0, &(0x7f0000001e80)) syz_usb_connect$uac2(0x3, 0xdf, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x499, 0x101a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x3, 0x1, 0xb, 0x20, 0x40, {0x8, 0xb, 0x0, 0x1, 0x1, 0x4, 0x20, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0xb, 0x4f, 0x4}, [@effect_unit={0xf, 0x24, 0x7, 0x4, 0x0, 0x3, [0x0, 0x3, 0x0, 0x0]}, @selector_unit={0x9, 0x24, 0xb, 0xa7, 0x4, "3d32b1e0"}, @selector_unit={0xa, 0x24, 0xb, 0x9, 0x5, "a605872f9c"}, @mixer_unit={0x7, 0x24, 0x4, 0x6, 0x4, '\ba'}, @extension_unit={0xd, 0x24, 0x9, 0x2, 0xc3, 0x5, "6331a37aac46"}, @input_terminal={0x10, 0x24, 0x2, 0x2, 0x200, 0x6, 0x0, 0xf2, 0x8, 0x8, 0x3, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0x5, 0x9, {0x8, 0x25, 0x1, 0x80, 0x12, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3, 0x1, 0xd1, 0x0, "b9ecf219ddefe90e64"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x33, 0x1, 0x9, 0x9, "f57e", "933f9c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x9, 0x3, 0x40, {0x8, 0x25, 0x1, 0x83, 0x6c, 0x4, 0x8a}}}}}}}}]}}, 0x0) executing program 5: openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x3f0, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, 0x0) executing program 3: memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) (async) ftruncate(0xffffffffffffffff, 0x8007) (async) finit_module(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f00000001c0)=0x135, 0x4) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./proc\x00', 0x9d) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000000)='7', 0x1) (async) timer_create(0x2, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x45833af92e4a39df, 0x0) close(r0) (async) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14, 0x800) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0xb9, 0x4, 0xc8, 0x6}, {0x8, 0x46, 0x10, 0x3}]}, 0x10) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000040), 0xffc1) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) select(0x40, &(0x7f0000000100)={0x3, 0x400000, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x10000000000, 0x4b06, 0x80000000, 0x3}, &(0x7f00000024c0)={0x40000000000009, 0x2000000010000, 0x1, 0x6, 0x2000, 0x0, 0x0, 0x4}, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) (async) mknod(&(0x7f0000000180)='./file0\x00', 0x800, 0x7fff) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') program crashed: SYZFAIL: posix_spawnp failed bisect: bisecting 38 programs bisect: split chunks (needed=false): <38> bisect: split chunk #0 of len 38 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 8, 29, 5, 1, 8, 16, 10, 8, 14, 7, 12, 8, 18, 2, 12, 14, 12, 6, 8, 6, 22, 16, 8, 30] detailed listing: executing program 33: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000206307122040000102030109021200010d0e503f09040000000103"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) executing program 5: openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x3f0, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, 0x0) executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x4e20, 0x0, 0x4e20, 0xfffc, 0x2, 0x20, 0x0, 0x89, 0x0, 0xffffffffffffffff}, {0x0, 0x7d, 0xad8, 0x7570e41c, 0x1, 0x80000000, 0x1, 0x3}, {0x6, 0x4, 0x5, 0x7}, 0x80000000, 0x6e6bb5}, {{@in6=@private1, 0x4d4, 0xff}, 0xa, @in6=@empty, 0x3503, 0x2, 0x0, 0xfd, 0xa398baf, 0x6, 0x5}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) symlink(&(0x7f0000003440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000002280)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000002180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000405804055000000000000109022400010000f07e09040000020300020009210500000122eb00090581031000fc0000"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_buf(r4, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="16000000ea00010400000000000000000a00000408001a4000000001bb92fd80ab22043d113f5b1b1641a55a31d4227ab16c971ce0e46ddfb704e84e9ca1c06f49dd654f1e1f51d1a47a7c9fb92ca51170070000004f314085abdeed6e47cb78581b9aaadd5c63dff2b22ee3fc90e6b923cafa04c5cca5ab89b99f1401a9bfca1057e670c72c21d634ec2912bd54622199637086fee1598e4498b8ce7a8db76e775280f8c0c7159c39c96d0ac7626784b964dfdd38e7d2caaaca9c519402f2c0de2b65f7342ab753"], 0x1c}}, 0x4000) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f00000002c0), 0x4) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f0000000340)=[{r3, 0x8010}, {r2, 0x8020}, {r10, 0x320}, {r12}, {r3, 0x8031}, {r13, 0x130}, {r1, 0x22}, {r13, 0x112}, {r1, 0x1}, {r11, 0x400}], 0xa, &(0x7f00000003c0)={0x0, 0x3938700}, &(0x7f0000000400)={[0x5]}, 0x8) r16 = dup(r15) syz_ublk_setup_queues(r16, r14, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) executing program 4: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f0000000040)='./file2\x00', 0x0, 0xf3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x4c01, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file2\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@afid={'afid', 0x3d, 0x1}}, {@version_9p2000}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, '$%'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x63, 0x35, 0x30, 0x61, 0x33, 0x35, 0x34], 0x2d, [0x33, 0x32, 0x30, 0x65], 0x2d, [0x39, 0x30, 0x65, 0x36], 0x2d, [0x33, 0x32, 0x38, 0x65], 0x2d, [0x62, 0x32, 0x3f, 0x31, 0x65, 0x32, 0x32, 0x65]}}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@seclabel}, {@obj_role={'obj_role', 0x3d, '!'}}, {@fsname}]}}) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) executing program 1: syz_usb_connect$uac2(0x0, 0x98, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000083512028040000102030109028600030180e007080b010101000000010120000924010200032600c511240806060000020002000200feff03000c2403fd0004a80206f9ff0a09040100000102200009040101010102200009050101400005040008250181090902000904020000010220000904023c46e8d9367ac2caea551c828ef8fafd01110102200009058209ff0305040208250183000a02000000000000"], 0x0) executing program 5: openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x3f0, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, 0x0) executing program 4: futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003500)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="240000000000000000000000070000008606"], 0x28}}], 0x1, 0x8090) (async) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) (async) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @empty, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) (async) recvmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/79, 0x15}, 0x7ffffffc}], 0x1, 0x2040, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000005f000100080031000000000000000000", @ANYRES64=r2], 0x20}], 0x1, 0x0, 0x0, 0x4040040}, 0x20000000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) creat(&(0x7f0000000040)='./file0\x00', 0x8) (async) fstat(r3, 0x0) executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8f, 0x0, @mcast2, @mcast1, 0x80, 0x700, 0x0, 0x20000000}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_clone3(&(0x7f0000000200)={0x40000000, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000040)=0xfff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0xc, 0x0, 0xfec00000, 0x0, &(0x7f0000000000/0x1000)=nil}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@code={0xa, 0x18, {"b80000c0fe3acb80"}}], 0xd3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) executing program 5: openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x3f0, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, 0x0) executing program 4: socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f00000004c0)={0x0, 0xbd, 0x800, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000040)={0xc0, 0x0, 0x10000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x11, r2, 0x40000) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, r3, 0x0, 0x0) executing program 3: r0 = userfaultfd(0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x181}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032bbd7000ffdbdf2501000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x4c890}, 0x44) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r3, 0x3000) executing program 5: openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x3f0, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, 0x0) executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x80108907, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="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", 0xdea}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) ioctl$KVM_RUN(r1, 0xae80, 0x0) executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffc, 0x1fc1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xffffffff, 0x1, &(0x7f0000000300)={0x4b5a9da54893e123, 0x1, 0x2, 0x1, 0xfffc}, 0x8, 0x0, 0x1000000, 0x0, 0x3, 0x0, 0x0}) executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x3e, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x8, 0x2, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = dup(r1) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd5) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1, 0x2172, 0xffffffffffffffff, 0x5ef5c000) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)={0x40, 0x7, 0x28, {0x28, 0x22, "441cb9917a13fb26d947232a22fa21eba2880e5beacc06643c5357ca953a30654178a7fc446d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x8) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x15, 0x0, &(0x7f0000000080)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="080075e700"}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x7e) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x7ff}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000040)=ANY=[@ANYBLOB="a1"]) add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, &(0x7f0000000780)="df6556a8", 0x4, 0xfffffffffffffffe) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0xaa0c1fb6921c1e66, 0x800, 0x0, 0x3}, 0x20) r2 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x8000000001cb, 0x12) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x408c0}, 0x20004080) executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x30, 0x8, {0x8, 0x22, "59a1b95388e8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000380)={{0x3, 0x100, 0x8, 0x7f, 0x6, 0x1}, 0x267, [0x2, 0x544, 0xffff, 0xec4, 0x1, 0x2, 0x0, 0x80, 0x3, 0x6, 0x1a, 0xe68, 0x8, 0x80, 0x6, 0x3, 0x5, 0x6, 0x3, 0xc7c0, 0x78, 0xa, 0x2f, 0xda, 0x9, 0x2, 0x9, 0x26380, 0x2, 0x6, 0xb, 0xfffffff8, 0x4, 0x8000, 0x2, 0xfffffff7, 0x75, 0x3c0, 0xa9, 0x7, 0xb, 0x5, 0x6f, 0x5, 0x0, 0x100, 0x5fa, 0xe0000000, 0xe, 0x7, 0x2, 0x4, 0xb, 0x9, 0x5, 0x3, 0x6, 0x97, 0x1, 0xfffffffe, 0x2, 0x66, 0x3, 0x3, 0x3, 0xfffffffe, 0x2, 0x0, 0x0, 0x8001, 0x0, 0x5, 0x1, 0x13b, 0x10001, 0x5, 0x50fae458, 0x5, 0x8001, 0x99b5, 0x0, 0x4, 0x7f, 0x0, 0x2, 0x3, 0x77b, 0x2, 0x6, 0x0, 0x0, 0x41f, 0x2e61, 0x10000, 0xb5, 0x1ff, 0x7d, 0x0, 0x8, 0x8, 0xba, 0x401, 0x4, 0x8, 0x7fff, 0x5, 0xffff, 0x8, 0x4, 0x6, 0x5, 0x4, 0x10, 0x4, 0x8, 0xa, 0x8, 0x9, 0x2, 0x3, 0x7fff, 0xfffffffe, 0x3, 0x9, 0x9, 0x0, 0x1, 0x3, 0xff, 0xa8df, 0x1ff, 0x22d1a543, 0x6, 0x2, 0x3ff, 0x98d, 0xb, 0xff, 0x9, 0x3, 0x200, 0x6, 0x4, 0xffffffc4, 0xffffffff, 0x1, 0x80000001, 0x1dacb008, 0x9, 0x9ab, 0xca, 0x200, 0x1000, 0x8, 0x4, 0x6, 0x6c7a, 0x5, 0x7, 0x100, 0x5, 0x3, 0xd, 0xb8f, 0x200, 0xc, 0x7, 0x0, 0x6, 0xc1, 0x7, 0x2, 0x10, 0x2, 0xffffffff, 0xffffff63, 0x9, 0x10001, 0x7, 0x8, 0x9, 0xe145, 0xffffffff, 0x4, 0x1, 0x8, 0x9046, 0x0, 0x238000, 0x4, 0x8, 0x7f, 0xf, 0xfffffffb, 0x6, 0x3, 0x3, 0xfffffffb, 0x5, 0x4396, 0x6, 0x400, 0x9, 0x4, 0x1, 0x2, 0x7, 0xffffff80, 0xdb2, 0x3, 0x9, 0x8, 0x3, 0xb, 0x2380, 0x7, 0x2, 0x4, 0x99, 0x4, 0x2, 0x5095f95c, 0x3612e695, 0x5, 0x1, 0x3, 0x3, 0x1, 0x4, 0x7302, 0xd, 0x9, 0x8, 0x8, 0x1, 0x7fffffff, 0x8, 0x2, 0x10, 0x78, 0x8000, 0xffffffe5, 0x9, 0x5d, 0x2, 0x400000, 0x4, 0x6451, 0xc, 0x10001, 0x8, 0x4, 0x2, 0x1, 0x0, 0x3ff, 0x8, 0x2f3cbf5, 0x6, 0x800, 0x0, 0x81, 0xe008, 0xff67, 0x1, 0x2, 0x7, 0xfffffff8, 0x9, 0x85a3, 0xcf, 0x7, 0xffffdf2b, 0x8, 0x7, 0x4, 0x8c000, 0x0, 0xff, 0x8, 0x8000, 0x8, 0x7fffffff, 0x6, 0x1417, 0xc, 0x0, 0x200, 0x2, 0x7f, 0x2, 0x200, 0x101, 0x0, 0x2, 0xfff, 0x3ff, 0x0, 0x5, 0x200, 0x5, 0x1, 0x5, 0x1, 0x40, 0x6, 0x24, 0x0, 0x7, 0x3ff, 0xd, 0x7, 0x181b, 0x9, 0x8, 0x4, 0x9, 0x7, 0x0, 0x2, 0x3, 0x5, 0x0, 0x6, 0x10000, 0x7, 0x300, 0x3, 0x3, 0x9, 0x9, 0x4, 0xda, 0x620, 0x4, 0x7, 0x3, 0x8d, 0x7, 0xffffffff, 0x10, 0x3, 0x4, 0x2, 0x5, 0x80, 0xc96, 0x1, 0x9, 0xce, 0x31118852, 0xf, 0xfffff001, 0x8, 0xd, 0xffff, 0x2105287c, 0x1, 0x81, 0x9, 0xfffffff9, 0x0, 0x8, 0x3, 0x7ae8, 0x5, 0x5d3, 0x1f4e, 0x2, 0x3, 0x7fffffff, 0x232, 0x4, 0xfffffffc, 0x8, 0x9, 0x4, 0x8, 0x8, 0xcfc, 0x66, 0xa, 0x0, 0x7, 0xe, 0x1, 0x8ef0, 0x8, 0x1, 0xcb, 0x9, 0x1, 0xa, 0xf, 0x7, 0x51a, 0x1, 0x7, 0x7, 0x4, 0x4, 0x4, 0x0, 0x8000, 0x8, 0xf, 0xb, 0x10001, 0xffff, 0xfffffff9, 0x5, 0x11c74928, 0xe30, 0x7, 0xd6, 0x4, 0x8, 0x5, 0x1ff, 0x5, 0x200, 0xfffffffd, 0x80000000, 0x7, 0x4, 0x100000, 0x9, 0x6, 0xb66, 0x8001, 0x8801, 0x4, 0x4, 0x1, 0x1, 0x6, 0x80000000, 0xffff, 0x5, 0x1000, 0x444, 0xd, 0x0, 0x3, 0x4, 0xffff, 0x9, 0xf, 0x3ff, 0x1, 0x9, 0xbf, 0x4, 0x5, 0x8, 0x10001, 0x3, 0x5270d244, 0x6, 0xfb0e, 0x0, 0x4, 0x8, 0xbe, 0x3, 0xfff, 0xc0, 0x2cc5693b, 0x1, 0x1, 0x7, 0x7fff, 0x101, 0x40, 0xa, 0x6, 0x0, 0x3, 0x1e000000, 0xfffffff8, 0x6041, 0x0, 0xfffffffb, 0x5c4, 0x1, 0x5, 0x4, 0xf, 0x4d0, 0x9, 0x6949, 0xc, 0x769, 0x7e73b20, 0x81a9, 0x0, 0x40a, 0x8, 0x0, 0x405ec9f0, 0x7, 0xfffffff7, 0x0, 0xbd3b2ad, 0x5, 0x0, 0x7, 0x4, 0x1, 0x8, 0x80, 0x80000001, 0x8, 0x1, 0x9, 0xffff, 0x7, 0x3, 0xfff, 0xfff, 0x0, 0x9, 0x1, 0xb1, 0x1, 0x7, 0xffff2cf3, 0x2, 0x4, 0x8, 0x8, 0x3d1c, 0x401, 0x1, 0x8, 0x814c, 0x2, 0x10, 0x5, 0x5, 0x4, 0x1, 0x3, 0x3, 0xffff5eb2, 0x58b, 0x6, 0x7, 0xffffffff, 0x1, 0x14c7eed3, 0x2, 0x9, 0x1, 0x1, 0x9, 0x0, 0x7, 0x96c, 0x4, 0x2, 0x5, 0x347e, 0x8, 0x0, 0x3, 0x7, 0xa, 0xff, 0x6fa, 0x0, 0xfe, 0xd, 0x6, 0x80000001, 0x4, 0x7, 0x800, 0x7, 0x2, 0x2, 0x5, 0x80000001, 0xc, 0x9, 0x9, 0x593, 0x5, 0xffffffff, 0x0, 0x5d5, 0x9, 0x0, 0x101, 0x7, 0x80000000, 0x5, 0x100, 0x3, 0x0, 0x1, 0x2, 0x9c8, 0x8c30, 0x8, 0x3ff, 0x91, 0x2, 0x200, 0x6, 0x2, 0x3ff, 0x140, 0x3, 0xffffffff, 0xcbe4, 0x14, 0x0, 0x1e, 0xa, 0xff, 0x6, 0xfffffffe, 0x8, 0x3, 0x4, 0x5, 0x1, 0x7fffffff, 0xffff0002, 0x1, 0x7, 0x6, 0x5, 0x3ff, 0x10, 0x1, 0x9, 0x6, 0xffffff13, 0xfffffff2, 0x1, 0x1f, 0x80000000, 0x100, 0xffffff00, 0x1, 0x6, 0x4, 0x4, 0x8000, 0x401, 0x3, 0x6, 0x7fff, 0x8a2, 0x4, 0x3ff, 0x0, 0x200, 0x1, 0x4, 0x5, 0xff, 0x7fffffff, 0x2, 0x9, 0x401, 0x0, 0x3f6, 0x59, 0x1, 0x0, 0x4, 0x2, 0xbc000000, 0x7005, 0x80000001, 0x7fffffff, 0x5, 0xe6, 0x26, 0x6, 0x8, 0x8000, 0x10000, 0x7, 0x9, 0x9, 0x6, 0x3, 0x8, 0x2, 0x5, 0x2, 0x5, 0xc, 0x4, 0x9, 0x0, 0x1, 0x10000, 0x1ff, 0x400, 0x7, 0x5, 0x0, 0x1, 0x100, 0x6, 0x4, 0x7, 0x5bb, 0x5, 0x7, 0x5ac66ac4, 0x2, 0x80000001, 0x1000, 0x8, 0x8, 0x2a, 0xfff, 0x33fbd07, 0x3, 0x6, 0x100, 0xe, 0x8, 0xffff, 0xff, 0x7, 0x8, 0x7, 0xff, 0x3, 0x7c, 0xd7, 0x9, 0xf7f6, 0x6, 0x5, 0x800, 0x4, 0xffffffff, 0x8, 0x51a, 0x40, 0x8, 0x1, 0x31, 0x9, 0xd8a, 0x401, 0x7, 0x8, 0x4, 0x400, 0x619, 0x4, 0x8, 0x22df, 0x2, 0x9, 0x81, 0xfffffffa, 0x8, 0x2, 0x334, 0xfe, 0xc31, 0x8, 0x7ff, 0x7fff, 0x7f, 0x6, 0x7fffffff, 0x8, 0x1, 0xdee6, 0xa, 0xfff, 0x4, 0x0, 0x0, 0x80, 0x7ff, 0x0, 0x4, 0x2, 0x8, 0x80000001, 0x2, 0x37, 0x1, 0x5, 0x2, 0x6, 0xff, 0x1, 0x7db8, 0x8, 0x9, 0x8, 0x9, 0x3ff, 0xfffffff9, 0x17dc, 0x7, 0xd2fa, 0xffff, 0x7fff, 0x1ff, 0x6e, 0x6, 0xc8ff, 0xea2, 0x9, 0x5, 0x6, 0xb8, 0x8, 0xffffffff, 0x4, 0x6, 0x8, 0x2, 0x7ff, 0xffff, 0x8, 0x9281, 0x2, 0x7, 0x1, 0xc6, 0x4, 0x4, 0x9, 0x10ba7323, 0x9239, 0x5, 0x8, 0x80, 0x2, 0xabc, 0x54be, 0x7, 0x5, 0x994, 0x80000001, 0x8, 0x3, 0xb, 0x40, 0x4, 0x6, 0x8000, 0x8, 0x3, 0x10, 0x100, 0xb76, 0x8, 0xa, 0x3, 0xa, 0x65c3, 0xffffffe5, 0x4, 0xfffffffe, 0x400, 0xe, 0x8, 0x5, 0x6, 0x9a, 0x80000000, 0xfffffffe, 0xaba, 0x4d, 0x2, 0x4, 0x400, 0x3ff, 0x5, 0x0, 0x4, 0xfffff801, 0x3, 0x9, 0x3, 0x6408, 0x2, 0x2, 0x1, 0x8, 0x2, 0x1, 0xe, 0x9, 0x2, 0x7, 0x6, 0xfff, 0x9, 0x1, 0x6d4d, 0x9, 0x400, 0x4, 0x5b, 0x400, 0xae0, 0x6e, 0x0, 0x3, 0x1, 0x0, 0x5, 0x2a38000, 0x7, 0x171, 0x1, 0x3, 0x4, 0xa1c, 0x8, 0x1000, 0x40, 0x80, 0xfffffffa, 0x4d753a7d, 0xb0c00, 0x1, 0x81, 0x8, 0x4, 0x31af, 0x1, 0x5, 0x400, 0x7, 0x75e, 0x5, 0x1, 0x4, 0x61, 0x1, 0x8, 0x2, 0x1, 0xfffffff8, 0x9, 0x6621, 0x9, 0x3, 0x9, 0xfffffffe, 0x7, 0x6, 0x8, 0xb7, 0x0, 0x5, 0xa, 0x3, 0x1499ffd3, 0xc, 0x7fffffff, 0x7fff, 0x5, 0xf, 0x200000, 0x1, 0xe0000, 0x3, 0x5, 0x6, 0x800, 0x40, 0x0, 0x81, 0x4, 0x9, 0x5, 0xfffffff7, 0x2d7, 0xffffffcc, 0x2, 0xfffffffd, 0xfff, 0x7ff, 0x6, 0x5, 0x8e, 0x9, 0x18d76825, 0x2, 0x6, 0x0, 0x1000, 0x838, 0xc00000, 0xcc3, 0x2, 0x4, 0x4, 0xd541, 0x800, 0x401, 0xcdb, 0x200, 0x81, 0x6, 0x5, 0x16000, 0xf787, 0x4, 0xb0000000, 0x2, 0xce5, 0x7fff, 0x3, 0x80000001]}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) executing program 5: openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x3f0, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, 0x0) executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000004c0)='./file1\x00', 0x5) r1 = add_key$fscrypt_v1(&(0x7f0000002280), &(0x7f00000022c0)={'fscrypt:', @desc2}, &(0x7f0000002300)={0x0, "2a4cea898139e0e0c019a74d3ea26dd02e4c241b97774cc682857eed746418339edb88181d7a65049884e401847aef386af7be95cb8e40e633ea34c59d08c962", 0x27}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r1, 0x0, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x6a) executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000140)=@ethtool_rxfh_indir={0x39, 0x3, [0x5, 0x3ff, 0xffffffff]}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000180)=0x2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000280)={0x3ff}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007fe000/0x800000)=nil) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x47, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0x6, 0x8, 0x8000000000080, 0x25, 0x80000, 0x7f, 0x44236, 0x800, 0x81, 0x4, 0x8001, 0x1005, 0xd, 0xb2e, 0x0, 0xfffffdfffffffffd], 0xe000, 0xe8980}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r7, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/89, 0x59}], 0x1}, 0xc0000}], 0x1, 0x40010112, 0x0) capget(&(0x7f0000000000)={0x19980330}, &(0x7f00000000c0)={0x5, 0x8, 0x4, 0x8, 0x2b9e, 0xd75}) executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_clone(0x88812700, &(0x7f00000001c0)="4592c49492bed9fdf0d2fe8425827646424917bcd48e7f1b0fea369b86f6a9b42144d7cbee65ed4c6746e02de4ae2ed86f7cd85d", 0x34, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="18f6ffe539eb343b20904a43be1bd36fdf9b1bb63df3030f219cee0606a6583c6b264a8f430a0e13a932e0abb8ccb83b0d6d68f1003165a22ca7b4887b87870b30dc71843f75ccea6a2d417204b8f52e752287a295dcfd9f4a82e7470ba011d5f540b6880af32035a8118d9cec8c7532d0f6a5c7b535f96734288a9b679b55593d640679069bc12e2a1ebfa20895fbef3b3adb01db6db6e2f96985004fe8") r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x20, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20, 0x0, 0x0, 0xee01}, {0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x1, 0x100000001}, {}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0x2, @in=@broadcast, 0x3501, 0x7, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000224e0000", 0x58}], 0x1) sched_setscheduler(r1, 0x6, &(0x7f0000000340)=0x50ee) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x3, 0x0, 0x0) accept$inet(r4, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x2a, 0x0, &(0x7f0000001e80)) syz_usb_connect$uac2(0x3, 0xdf, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x499, 0x101a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x3, 0x1, 0xb, 0x20, 0x40, {0x8, 0xb, 0x0, 0x1, 0x1, 0x4, 0x20, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0xb, 0x4f, 0x4}, [@effect_unit={0xf, 0x24, 0x7, 0x4, 0x0, 0x3, [0x0, 0x3, 0x0, 0x0]}, @selector_unit={0x9, 0x24, 0xb, 0xa7, 0x4, "3d32b1e0"}, @selector_unit={0xa, 0x24, 0xb, 0x9, 0x5, "a605872f9c"}, @mixer_unit={0x7, 0x24, 0x4, 0x6, 0x4, '\ba'}, @extension_unit={0xd, 0x24, 0x9, 0x2, 0xc3, 0x5, "6331a37aac46"}, @input_terminal={0x10, 0x24, 0x2, 0x2, 0x200, 0x6, 0x0, 0xf2, 0x8, 0x8, 0x3, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0x5, 0x9, {0x8, 0x25, 0x1, 0x80, 0x12, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3, 0x1, 0xd1, 0x0, "b9ecf219ddefe90e64"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x33, 0x1, 0x9, 0x9, "f57e", "933f9c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x9, 0x3, 0x40, {0x8, 0x25, 0x1, 0x83, 0x6c, 0x4, 0x8a}}}}}}}}]}}, 0x0) executing program 5: openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x3f0, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, 0x0) executing program 3: memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) (async) ftruncate(0xffffffffffffffff, 0x8007) (async) finit_module(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f00000001c0)=0x135, 0x4) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./proc\x00', 0x9d) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000000)='7', 0x1) (async) timer_create(0x2, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x45833af92e4a39df, 0x0) close(r0) (async) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14, 0x800) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0xb9, 0x4, 0xc8, 0x6}, {0x8, 0x46, 0x10, 0x3}]}, 0x10) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000040), 0xffc1) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) select(0x40, &(0x7f0000000100)={0x3, 0x400000, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x10000000000, 0x4b06, 0x80000000, 0x3}, &(0x7f00000024c0)={0x40000000000009, 0x2000000010000, 0x1, 0x6, 0x2000, 0x0, 0x0, 0x4}, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) (async) mknod(&(0x7f0000000180)='./file0\x00', 0x800, 0x7fff) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') program did not crash bisect: testing without sub-chunk 2/3 testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8, 10, 6, 26, 21, 30, 11, 2, 2, 23, 3, 3, 18, 2, 12, 14, 12, 6, 8, 6, 22, 16, 8, 30] detailed listing: executing program 2: r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000100)={'raw\x00', 0x2, [{}, {}]}, 0x48) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000700)={0x8f, 0x0, 0xb}) r3 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r3, &(0x7f00000004c0)={0x0, 0x0}) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x2004402, &(0x7f0000000140)=ANY=[@ANYBLOB="3a114e5759347a822c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',noxattr,\x00']) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000001c40)={'ipvs\x00'}, &(0x7f0000001c80)=0x1e) sendmsg$AUDIT_TTY_GET(r2, 0x0, 0x14) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000000)=ANY=[], 0x0) executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x10, {{@in=@broadcast, @in=@loopback, 0x4e22, 0xd3a, 0xffff, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x2, 0x9, 0x80}}, [@tmpl={0xc4, 0x5, [{{@in6=@private0, 0x0, 0x3c}, 0x0, @in=@remote, 0x34ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6e}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, 0x0, 0x3c}, 0x0, @in6=@loopback, 0xfffffffd, 0x2, 0x3, 0x0, 0x7, 0x800, 0x2}, {{@in=@multicast1, 0x4d4, 0x2b}, 0x2, @in=@local, 0x4, 0x4, 0x1, 0x7, 0x0, 0x0, 0x400}]}]}, 0x17c}}, 0x80c4) r1 = socket$inet6(0xa, 0x1, 0x0) close(0x3) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000008fcff", 0xfffffffffffffd23}], 0x1) socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000880)=0x40005, 0x4) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffbffffbe, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @private1, 0x6}, 0x1c) executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) accept$unix(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x1214864, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180), 0x224802, &(0x7f00000002c0)={[{@xino_auto, 0x3a}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@smackfshat={'smackfshat', 0x3d, 'mask'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@subj_role={'subj_role', 0x3d, ',\\\x97!##.#$-!-}$@,'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@dont_hash}], 0x2f}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)='$\x00\x00', 0x3}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x0, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x7, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x8000001, 0x5, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0xa, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x5, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x51) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) (async) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="1a040500c7ff03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r9, 0x1, 0x6, 0x6, @remote}, 0x14) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, 0x14, 0x1, 0x4, 0x25dfdbfe, {0x2}, [@typed={0x4}, @nested={0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') creat(&(0x7f0000000240)='./file1\x00', 0x0) fstat(0xffffffffffffffff, 0x0) lstat(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)) r1 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000540)=ANY=[@ANYBLOB="120100020000002082052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a00000b7f00090401efff01022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}}, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000480)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, 0x0) clock_nanosleep(0x1, 0x0, 0x0, 0x0) syz_usb_connect$uac2(0x0, 0x8b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000020532b2300400001020301090279000301fb4004080b02010103200109040000000101200009240108000c1900e508240a00040b060308240a0901030602090401000001022000090401010101022000090501"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x16b3, [{0x0, &(0x7f0000000080)=@lang_id={0x0, 0x3, 0x422}}, {0x0, &(0x7f00000000c0)=@string={0x0, 0x3, "cf6f39ef6bd8a0ab15f5e41d648876807d0e021e540b9b6c3bb530e121c652bb153767e06cca6d9b2ce82ed99c59f3c2e890aa26961507154e1ce5c5b091ba08e89d27f80f3cd02da279a4707137f7b3af6af9253a1974cd982b20ae7b37dec6526132257c8286c9bc7d9ff81e09e5431fac51f7e7b72e70f33135f393769d7e2c8167196acf90a260bdf09d16b21c190bddb25dedee04dff89b3a573d3c54e3cde345c2e688f53170b48d8eb2d9934ff6ac25c64f635d396dd7941f3fd61fb99b"}}]}) executing program 2: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000080)) (async, rerun: 64) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x100, r1, 0x301, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "327c42b6644a052df4593e78acbac5bc262b5f600fbd24a94f"}}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa56}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x8801) (async, rerun: 32) r2 = syz_open_dev$hidraw(&(0x7f00000002c0), 0x771f, 0x101440) (rerun: 32) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000300)="90d687d97bd243a3949473c653327da09844325884336a039682d6bf2e1654c0d28d4d92d5de0dcce8791add99111558f41767b9e7866b28b26f60accd09c763e8ebd40bd2d8501568839be6911853eca109826910943e66ac874b9ee08531943267fac7781e51bf900e7e2423778581e605a1b456eff8ff5859edcb2756ec5b842d7c88291ca7800a7014fb263afc2bc07d69cf5f52ed11d56a4e9443079a3cfe0c55c50c7c8b695024") r3 = syz_open_dev$hiddev(&(0x7f00000003c0), 0x1, 0x100) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000000400)={0x1, 0x3, 0x400}) (async) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3) (async) ioctl$KVM_GET_SREGS2(0xffffffffffffffff, 0x8140aecc, &(0x7f0000000440)) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000580)) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xfeac7ef430d44c4b}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x118, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffa}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x10}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40014}, 0x4000000) (async) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000800)='devices.list\x00', 0x0, 0x0) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, 0xfffffffffffffffd) (async) ioctl$TIOCGISO7816(r7, 0x80285442, &(0x7f0000000840)) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x6c, r6, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44}, 0x400) (async) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f00000009c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0xb5, 0x40, 0x4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '!'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x8, 0xd0, 0x6}, {0x6, 0x24, 0x1a, 0x2, 0x10}, [@acm={0x4, 0x24, 0x2, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0xfe, 0x1d, 0x2, 0x80}, @mbim={0xc, 0x24, 0x1b, 0xd, 0x74, 0x7f, 0x8, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x4, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x87, 0x1c, 0x1}}}}}}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x300, 0x9, 0x3, 0x9a, 0x40, 0x4}, 0xc9, &(0x7f0000000ac0)={0x5, 0xf, 0xc9, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x4, 0x1, 0x2}, @generic={0xba, 0x10, 0x3, "7dbb6718e270f52b4dc95e98b3c377f7faf551d5a54896bb392c2b59addc32f3dc325c0fb28f84045b0a9da7ed070ef5d9eb7d8ee8bc06a7450a280e801a869f79b486e2e8b94910687875837314279512da49a644a1f7cd7fd4d14c308a3818abdb35e7ef41679d3fa57c41134b560aa762cc92bbedec329b615beb744d2afc98d8ae9509c9debbbf7166ebf1dab013af39f6f63ca07b792ae60d74877e332d9069847628389b924e8e5060f39aa4c0f6eeb1ff828348"}]}, 0x5, [{0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x415}}, {0x7b, &(0x7f0000000c40)=@string={0x7b, 0x3, "1a5a05d2de756fd29453f0485a1a740505096f3527cf5cc0edd856ab7f8efed89f2e40dd58c7eff6848e210efc30fc0f984ea08a0a39228eca7a0520a7dd69b17752321a5ad208296878298560bbd9a59c87a3a67a58a268d22c583d89da1b4819706b9ad85a32a2a4ab2da32c1e8c68001534e90f93750b63"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x400a}}, {0xc4, &(0x7f0000000d00)=@string={0xc4, 0x3, "addeeb3feb91cb45594862a916871b557a1cea8133f3efb0725337a6637e866bd0231f1faf3d530b1002d6b8a09832e51d5b0f3acdcb82bde553afaf27f9b9a7b0530d94dd5d5550ead46b4b3b0fc5e3c98d89b05bef6818df0f32d839cc4a728963c7633653b3801ba1f58b08f1d2380b18475f9b3eddc17fbb2a872783caaf2042427356343235902e4490e3eb52f3918a6f62e289e054525c2114a40de55f08bae87275422eee7de8cb3971a43dd66c375abbfd54706d61741f4f54bca8ad9a1a"}}]}) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r8, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '{\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10008015}, 0x6000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000001140)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x48, r9, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x756, 0x6a}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008810}, 0x20008004) read$ptp(r7, &(0x7f0000001180)=""/209, 0xd1) (async, rerun: 32) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000012c0), 0xffffffffffffffff) (rerun: 32) sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x74, r11, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x18000000}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x10040010) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008890}, 0x0) (rerun: 32) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f0000000040)='./file2\x00', 0x0, 0xf3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x4c01, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) close(r1) executing program 0: capget(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x5, 0x6, 0x5, 0x2, 0x80000000, 0x2}) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x763, 0x2012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xe, 0x50, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20}}}}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) executing program 32: capget(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x5, 0x6, 0x5, 0x2, 0x80000000, 0x2}) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x763, 0x2012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xe, 0x50, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20}}}}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "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"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001"], 0x50}}, 0x0) read$rfkill(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000000)={0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r4, &(0x7f0000000000)="ff", 0x1001, 0x100000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="eaffff00000000ff"], 0x0}, 0x0) executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x3, 0xfffffffc, 0x3, 0x8}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000300)={0x4, 0x9dc5, 0x1fd, 0x0, 0x3}) executing program 2: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000206307122040000102030109021200010d0e503f09040000000103"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x80108907, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="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", 0xdea}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) ioctl$KVM_RUN(r1, 0xae80, 0x0) executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffc, 0x1fc1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xffffffff, 0x1, &(0x7f0000000300)={0x4b5a9da54893e123, 0x1, 0x2, 0x1, 0xfffc}, 0x8, 0x0, 0x1000000, 0x0, 0x3, 0x0, 0x0}) executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x3e, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x8, 0x2, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = dup(r1) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd5) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1, 0x2172, 0xffffffffffffffff, 0x5ef5c000) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)={0x40, 0x7, 0x28, {0x28, 0x22, "441cb9917a13fb26d947232a22fa21eba2880e5beacc06643c5357ca953a30654178a7fc446d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x8) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x15, 0x0, &(0x7f0000000080)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="080075e700"}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a0088090180c2000002ffffffffffff86dd65a04b2e00442ffffe8000000000000000000000000000bbff0100000000000000000000000000010421880b0000000305000800000086dd080088be000000001304b8070100000000010001008b4c52635cc64d080022eb0000000025248e0102000000000000010003950b080065580000000056dd6ab1b387a26c61667dc55f43493be2c3c0bdcb79ba7aa4f0b97ff7150fe1c0c47b5845389c69776dd20753e1fe7bd9dbb5324e4f1f397126b6a7de7f8a71926a8fbc663e85bb4a565cd1698bde28188a3ab4ecc74c5e29cee81100d6ee5480cbdd6b6b1c5cfd093b127427f7cb6735e68d20ab58d722ef"], 0x7e) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x7ff}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000040)=ANY=[@ANYBLOB="a1"]) add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, &(0x7f0000000780)="df6556a8", 0x4, 0xfffffffffffffffe) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0xaa0c1fb6921c1e66, 0x800, 0x0, 0x3}, 0x20) r2 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x8000000001cb, 0x12) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x408c0}, 0x20004080) executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x30, 0x8, {0x8, 0x22, "59a1b95388e8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000380)={{0x3, 0x100, 0x8, 0x7f, 0x6, 0x1}, 0x267, [0x2, 0x544, 0xffff, 0xec4, 0x1, 0x2, 0x0, 0x80, 0x3, 0x6, 0x1a, 0xe68, 0x8, 0x80, 0x6, 0x3, 0x5, 0x6, 0x3, 0xc7c0, 0x78, 0xa, 0x2f, 0xda, 0x9, 0x2, 0x9, 0x26380, 0x2, 0x6, 0xb, 0xfffffff8, 0x4, 0x8000, 0x2, 0xfffffff7, 0x75, 0x3c0, 0xa9, 0x7, 0xb, 0x5, 0x6f, 0x5, 0x0, 0x100, 0x5fa, 0xe0000000, 0xe, 0x7, 0x2, 0x4, 0xb, 0x9, 0x5, 0x3, 0x6, 0x97, 0x1, 0xfffffffe, 0x2, 0x66, 0x3, 0x3, 0x3, 0xfffffffe, 0x2, 0x0, 0x0, 0x8001, 0x0, 0x5, 0x1, 0x13b, 0x10001, 0x5, 0x50fae458, 0x5, 0x8001, 0x99b5, 0x0, 0x4, 0x7f, 0x0, 0x2, 0x3, 0x77b, 0x2, 0x6, 0x0, 0x0, 0x41f, 0x2e61, 0x10000, 0xb5, 0x1ff, 0x7d, 0x0, 0x8, 0x8, 0xba, 0x401, 0x4, 0x8, 0x7fff, 0x5, 0xffff, 0x8, 0x4, 0x6, 0x5, 0x4, 0x10, 0x4, 0x8, 0xa, 0x8, 0x9, 0x2, 0x3, 0x7fff, 0xfffffffe, 0x3, 0x9, 0x9, 0x0, 0x1, 0x3, 0xff, 0xa8df, 0x1ff, 0x22d1a543, 0x6, 0x2, 0x3ff, 0x98d, 0xb, 0xff, 0x9, 0x3, 0x200, 0x6, 0x4, 0xffffffc4, 0xffffffff, 0x1, 0x80000001, 0x1dacb008, 0x9, 0x9ab, 0xca, 0x200, 0x1000, 0x8, 0x4, 0x6, 0x6c7a, 0x5, 0x7, 0x100, 0x5, 0x3, 0xd, 0xb8f, 0x200, 0xc, 0x7, 0x0, 0x6, 0xc1, 0x7, 0x2, 0x10, 0x2, 0xffffffff, 0xffffff63, 0x9, 0x10001, 0x7, 0x8, 0x9, 0xe145, 0xffffffff, 0x4, 0x1, 0x8, 0x9046, 0x0, 0x238000, 0x4, 0x8, 0x7f, 0xf, 0xfffffffb, 0x6, 0x3, 0x3, 0xfffffffb, 0x5, 0x4396, 0x6, 0x400, 0x9, 0x4, 0x1, 0x2, 0x7, 0xffffff80, 0xdb2, 0x3, 0x9, 0x8, 0x3, 0xb, 0x2380, 0x7, 0x2, 0x4, 0x99, 0x4, 0x2, 0x5095f95c, 0x3612e695, 0x5, 0x1, 0x3, 0x3, 0x1, 0x4, 0x7302, 0xd, 0x9, 0x8, 0x8, 0x1, 0x7fffffff, 0x8, 0x2, 0x10, 0x78, 0x8000, 0xffffffe5, 0x9, 0x5d, 0x2, 0x400000, 0x4, 0x6451, 0xc, 0x10001, 0x8, 0x4, 0x2, 0x1, 0x0, 0x3ff, 0x8, 0x2f3cbf5, 0x6, 0x800, 0x0, 0x81, 0xe008, 0xff67, 0x1, 0x2, 0x7, 0xfffffff8, 0x9, 0x85a3, 0xcf, 0x7, 0xffffdf2b, 0x8, 0x7, 0x4, 0x8c000, 0x0, 0xff, 0x8, 0x8000, 0x8, 0x7fffffff, 0x6, 0x1417, 0xc, 0x0, 0x200, 0x2, 0x7f, 0x2, 0x200, 0x101, 0x0, 0x2, 0xfff, 0x3ff, 0x0, 0x5, 0x200, 0x5, 0x1, 0x5, 0x1, 0x40, 0x6, 0x24, 0x0, 0x7, 0x3ff, 0xd, 0x7, 0x181b, 0x9, 0x8, 0x4, 0x9, 0x7, 0x0, 0x2, 0x3, 0x5, 0x0, 0x6, 0x10000, 0x7, 0x300, 0x3, 0x3, 0x9, 0x9, 0x4, 0xda, 0x620, 0x4, 0x7, 0x3, 0x8d, 0x7, 0xffffffff, 0x10, 0x3, 0x4, 0x2, 0x5, 0x80, 0xc96, 0x1, 0x9, 0xce, 0x31118852, 0xf, 0xfffff001, 0x8, 0xd, 0xffff, 0x2105287c, 0x1, 0x81, 0x9, 0xfffffff9, 0x0, 0x8, 0x3, 0x7ae8, 0x5, 0x5d3, 0x1f4e, 0x2, 0x3, 0x7fffffff, 0x232, 0x4, 0xfffffffc, 0x8, 0x9, 0x4, 0x8, 0x8, 0xcfc, 0x66, 0xa, 0x0, 0x7, 0xe, 0x1, 0x8ef0, 0x8, 0x1, 0xcb, 0x9, 0x1, 0xa, 0xf, 0x7, 0x51a, 0x1, 0x7, 0x7, 0x4, 0x4, 0x4, 0x0, 0x8000, 0x8, 0xf, 0xb, 0x10001, 0xffff, 0xfffffff9, 0x5, 0x11c74928, 0xe30, 0x7, 0xd6, 0x4, 0x8, 0x5, 0x1ff, 0x5, 0x200, 0xfffffffd, 0x80000000, 0x7, 0x4, 0x100000, 0x9, 0x6, 0xb66, 0x8001, 0x8801, 0x4, 0x4, 0x1, 0x1, 0x6, 0x80000000, 0xffff, 0x5, 0x1000, 0x444, 0xd, 0x0, 0x3, 0x4, 0xffff, 0x9, 0xf, 0x3ff, 0x1, 0x9, 0xbf, 0x4, 0x5, 0x8, 0x10001, 0x3, 0x5270d244, 0x6, 0xfb0e, 0x0, 0x4, 0x8, 0xbe, 0x3, 0xfff, 0xc0, 0x2cc5693b, 0x1, 0x1, 0x7, 0x7fff, 0x101, 0x40, 0xa, 0x6, 0x0, 0x3, 0x1e000000, 0xfffffff8, 0x6041, 0x0, 0xfffffffb, 0x5c4, 0x1, 0x5, 0x4, 0xf, 0x4d0, 0x9, 0x6949, 0xc, 0x769, 0x7e73b20, 0x81a9, 0x0, 0x40a, 0x8, 0x0, 0x405ec9f0, 0x7, 0xfffffff7, 0x0, 0xbd3b2ad, 0x5, 0x0, 0x7, 0x4, 0x1, 0x8, 0x80, 0x80000001, 0x8, 0x1, 0x9, 0xffff, 0x7, 0x3, 0xfff, 0xfff, 0x0, 0x9, 0x1, 0xb1, 0x1, 0x7, 0xffff2cf3, 0x2, 0x4, 0x8, 0x8, 0x3d1c, 0x401, 0x1, 0x8, 0x814c, 0x2, 0x10, 0x5, 0x5, 0x4, 0x1, 0x3, 0x3, 0xffff5eb2, 0x58b, 0x6, 0x7, 0xffffffff, 0x1, 0x14c7eed3, 0x2, 0x9, 0x1, 0x1, 0x9, 0x0, 0x7, 0x96c, 0x4, 0x2, 0x5, 0x347e, 0x8, 0x0, 0x3, 0x7, 0xa, 0xff, 0x6fa, 0x0, 0xfe, 0xd, 0x6, 0x80000001, 0x4, 0x7, 0x800, 0x7, 0x2, 0x2, 0x5, 0x80000001, 0xc, 0x9, 0x9, 0x593, 0x5, 0xffffffff, 0x0, 0x5d5, 0x9, 0x0, 0x101, 0x7, 0x80000000, 0x5, 0x100, 0x3, 0x0, 0x1, 0x2, 0x9c8, 0x8c30, 0x8, 0x3ff, 0x91, 0x2, 0x200, 0x6, 0x2, 0x3ff, 0x140, 0x3, 0xffffffff, 0xcbe4, 0x14, 0x0, 0x1e, 0xa, 0xff, 0x6, 0xfffffffe, 0x8, 0x3, 0x4, 0x5, 0x1, 0x7fffffff, 0xffff0002, 0x1, 0x7, 0x6, 0x5, 0x3ff, 0x10, 0x1, 0x9, 0x6, 0xffffff13, 0xfffffff2, 0x1, 0x1f, 0x80000000, 0x100, 0xffffff00, 0x1, 0x6, 0x4, 0x4, 0x8000, 0x401, 0x3, 0x6, 0x7fff, 0x8a2, 0x4, 0x3ff, 0x0, 0x200, 0x1, 0x4, 0x5, 0xff, 0x7fffffff, 0x2, 0x9, 0x401, 0x0, 0x3f6, 0x59, 0x1, 0x0, 0x4, 0x2, 0xbc000000, 0x7005, 0x80000001, 0x7fffffff, 0x5, 0xe6, 0x26, 0x6, 0x8, 0x8000, 0x10000, 0x7, 0x9, 0x9, 0x6, 0x3, 0x8, 0x2, 0x5, 0x2, 0x5, 0xc, 0x4, 0x9, 0x0, 0x1, 0x10000, 0x1ff, 0x400, 0x7, 0x5, 0x0, 0x1, 0x100, 0x6, 0x4, 0x7, 0x5bb, 0x5, 0x7, 0x5ac66ac4, 0x2, 0x80000001, 0x1000, 0x8, 0x8, 0x2a, 0xfff, 0x33fbd07, 0x3, 0x6, 0x100, 0xe, 0x8, 0xffff, 0xff, 0x7, 0x8, 0x7, 0xff, 0x3, 0x7c, 0xd7, 0x9, 0xf7f6, 0x6, 0x5, 0x800, 0x4, 0xffffffff, 0x8, 0x51a, 0x40, 0x8, 0x1, 0x31, 0x9, 0xd8a, 0x401, 0x7, 0x8, 0x4, 0x400, 0x619, 0x4, 0x8, 0x22df, 0x2, 0x9, 0x81, 0xfffffffa, 0x8, 0x2, 0x334, 0xfe, 0xc31, 0x8, 0x7ff, 0x7fff, 0x7f, 0x6, 0x7fffffff, 0x8, 0x1, 0xdee6, 0xa, 0xfff, 0x4, 0x0, 0x0, 0x80, 0x7ff, 0x0, 0x4, 0x2, 0x8, 0x80000001, 0x2, 0x37, 0x1, 0x5, 0x2, 0x6, 0xff, 0x1, 0x7db8, 0x8, 0x9, 0x8, 0x9, 0x3ff, 0xfffffff9, 0x17dc, 0x7, 0xd2fa, 0xffff, 0x7fff, 0x1ff, 0x6e, 0x6, 0xc8ff, 0xea2, 0x9, 0x5, 0x6, 0xb8, 0x8, 0xffffffff, 0x4, 0x6, 0x8, 0x2, 0x7ff, 0xffff, 0x8, 0x9281, 0x2, 0x7, 0x1, 0xc6, 0x4, 0x4, 0x9, 0x10ba7323, 0x9239, 0x5, 0x8, 0x80, 0x2, 0xabc, 0x54be, 0x7, 0x5, 0x994, 0x80000001, 0x8, 0x3, 0xb, 0x40, 0x4, 0x6, 0x8000, 0x8, 0x3, 0x10, 0x100, 0xb76, 0x8, 0xa, 0x3, 0xa, 0x65c3, 0xffffffe5, 0x4, 0xfffffffe, 0x400, 0xe, 0x8, 0x5, 0x6, 0x9a, 0x80000000, 0xfffffffe, 0xaba, 0x4d, 0x2, 0x4, 0x400, 0x3ff, 0x5, 0x0, 0x4, 0xfffff801, 0x3, 0x9, 0x3, 0x6408, 0x2, 0x2, 0x1, 0x8, 0x2, 0x1, 0xe, 0x9, 0x2, 0x7, 0x6, 0xfff, 0x9, 0x1, 0x6d4d, 0x9, 0x400, 0x4, 0x5b, 0x400, 0xae0, 0x6e, 0x0, 0x3, 0x1, 0x0, 0x5, 0x2a38000, 0x7, 0x171, 0x1, 0x3, 0x4, 0xa1c, 0x8, 0x1000, 0x40, 0x80, 0xfffffffa, 0x4d753a7d, 0xb0c00, 0x1, 0x81, 0x8, 0x4, 0x31af, 0x1, 0x5, 0x400, 0x7, 0x75e, 0x5, 0x1, 0x4, 0x61, 0x1, 0x8, 0x2, 0x1, 0xfffffff8, 0x9, 0x6621, 0x9, 0x3, 0x9, 0xfffffffe, 0x7, 0x6, 0x8, 0xb7, 0x0, 0x5, 0xa, 0x3, 0x1499ffd3, 0xc, 0x7fffffff, 0x7fff, 0x5, 0xf, 0x200000, 0x1, 0xe0000, 0x3, 0x5, 0x6, 0x800, 0x40, 0x0, 0x81, 0x4, 0x9, 0x5, 0xfffffff7, 0x2d7, 0xffffffcc, 0x2, 0xfffffffd, 0xfff, 0x7ff, 0x6, 0x5, 0x8e, 0x9, 0x18d76825, 0x2, 0x6, 0x0, 0x1000, 0x838, 0xc00000, 0xcc3, 0x2, 0x4, 0x4, 0xd541, 0x800, 0x401, 0xcdb, 0x200, 0x81, 0x6, 0x5, 0x16000, 0xf787, 0x4, 0xb0000000, 0x2, 0xce5, 0x7fff, 0x3, 0x80000001]}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) executing program 5: openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x3f0, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, 0x0) executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000004c0)='./file1\x00', 0x5) r1 = add_key$fscrypt_v1(&(0x7f0000002280), &(0x7f00000022c0)={'fscrypt:', @desc2}, &(0x7f0000002300)={0x0, "2a4cea898139e0e0c019a74d3ea26dd02e4c241b97774cc682857eed746418339edb88181d7a65049884e401847aef386af7be95cb8e40e633ea34c59d08c962", 0x27}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r1, 0x0, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x6a) executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000140)=@ethtool_rxfh_indir={0x39, 0x3, [0x5, 0x3ff, 0xffffffff]}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000180)=0x2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000280)={0x3ff}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007fe000/0x800000)=nil) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x47, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0x6, 0x8, 0x8000000000080, 0x25, 0x80000, 0x7f, 0x44236, 0x800, 0x81, 0x4, 0x8001, 0x1005, 0xd, 0xb2e, 0x0, 0xfffffdfffffffffd], 0xe000, 0xe8980}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r7, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/89, 0x59}], 0x1}, 0xc0000}], 0x1, 0x40010112, 0x0) capget(&(0x7f0000000000)={0x19980330}, &(0x7f00000000c0)={0x5, 0x8, 0x4, 0x8, 0x2b9e, 0xd75}) executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_clone(0x88812700, &(0x7f00000001c0)="4592c49492bed9fdf0d2fe8425827646424917bcd48e7f1b0fea369b86f6a9b42144d7cbee65ed4c6746e02de4ae2ed86f7cd85d", 0x34, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="18f6ffe539eb343b20904a43be1bd36fdf9b1bb63df3030f219cee0606a6583c6b264a8f430a0e13a932e0abb8ccb83b0d6d68f1003165a22ca7b4887b87870b30dc71843f75ccea6a2d417204b8f52e752287a295dcfd9f4a82e7470ba011d5f540b6880af32035a8118d9cec8c7532d0f6a5c7b535f96734288a9b679b55593d640679069bc12e2a1ebfa20895fbef3b3adb01db6db6e2f96985004fe8") r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x20, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20, 0x0, 0x0, 0xee01}, {0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x1, 0x100000001}, {}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0x2, @in=@broadcast, 0x3501, 0x7, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000224e0000", 0x58}], 0x1) sched_setscheduler(r1, 0x6, &(0x7f0000000340)=0x50ee) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x3, 0x0, 0x0) accept$inet(r4, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x2a, 0x0, &(0x7f0000001e80)) syz_usb_connect$uac2(0x3, 0xdf, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x499, 0x101a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x3, 0x1, 0xb, 0x20, 0x40, {0x8, 0xb, 0x0, 0x1, 0x1, 0x4, 0x20, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0xb, 0x4f, 0x4}, [@effect_unit={0xf, 0x24, 0x7, 0x4, 0x0, 0x3, [0x0, 0x3, 0x0, 0x0]}, @selector_unit={0x9, 0x24, 0xb, 0xa7, 0x4, "3d32b1e0"}, @selector_unit={0xa, 0x24, 0xb, 0x9, 0x5, "a605872f9c"}, @mixer_unit={0x7, 0x24, 0x4, 0x6, 0x4, '\ba'}, @extension_unit={0xd, 0x24, 0x9, 0x2, 0xc3, 0x5, "6331a37aac46"}, @input_terminal={0x10, 0x24, 0x2, 0x2, 0x200, 0x6, 0x0, 0xf2, 0x8, 0x8, 0x3, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0x5, 0x9, {0x8, 0x25, 0x1, 0x80, 0x12, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3, 0x1, 0xd1, 0x0, "b9ecf219ddefe90e64"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x33, 0x1, 0x9, 0x9, "f57e", "933f9c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x9, 0x3, 0x40, {0x8, 0x25, 0x1, 0x83, 0x6c, 0x4, 0x8a}}}}}}}}]}}, 0x0) executing program 5: openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x3f0, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, 0x0) executing program 3: memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) (async) ftruncate(0xffffffffffffffff, 0x8007) (async) finit_module(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f00000001c0)=0x135, 0x4) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./proc\x00', 0x9d) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000000)='7', 0x1) (async) timer_create(0x2, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x45833af92e4a39df, 0x0) close(r0) (async) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14, 0x800) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0xb9, 0x4, 0xc8, 0x6}, {0x8, 0x46, 0x10, 0x3}]}, 0x10) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000040), 0xffc1) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) select(0x40, &(0x7f0000000100)={0x3, 0x400000, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x10000000000, 0x4b06, 0x80000000, 0x3}, &(0x7f00000024c0)={0x40000000000009, 0x2000000010000, 0x1, 0x6, 0x2000, 0x0, 0x0, 0x4}, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) (async) mknod(&(0x7f0000000180)='./file0\x00', 0x800, 0x7fff) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') program crashed: SYZFAIL: posix_spawnp failed bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8, 10, 6, 26, 21, 30, 11, 2, 2, 23, 3, 3] detailed listing: executing program 2: r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000100)={'raw\x00', 0x2, [{}, {}]}, 0x48) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000700)={0x8f, 0x0, 0xb}) r3 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r3, &(0x7f00000004c0)={0x0, 0x0}) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x2004402, &(0x7f0000000140)=ANY=[@ANYBLOB="3a114e5759347a822c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',noxattr,\x00']) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000001c40)={'ipvs\x00'}, &(0x7f0000001c80)=0x1e) sendmsg$AUDIT_TTY_GET(r2, 0x0, 0x14) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000000)=ANY=[], 0x0) executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x10, {{@in=@broadcast, @in=@loopback, 0x4e22, 0xd3a, 0xffff, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x2, 0x9, 0x80}}, [@tmpl={0xc4, 0x5, [{{@in6=@private0, 0x0, 0x3c}, 0x0, @in=@remote, 0x34ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6e}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, 0x0, 0x3c}, 0x0, @in6=@loopback, 0xfffffffd, 0x2, 0x3, 0x0, 0x7, 0x800, 0x2}, {{@in=@multicast1, 0x4d4, 0x2b}, 0x2, @in=@local, 0x4, 0x4, 0x1, 0x7, 0x0, 0x0, 0x400}]}]}, 0x17c}}, 0x80c4) r1 = socket$inet6(0xa, 0x1, 0x0) close(0x3) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000008fcff", 0xfffffffffffffd23}], 0x1) socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000880)=0x40005, 0x4) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffbffffbe, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @private1, 0x6}, 0x1c) executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) accept$unix(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x1214864, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180), 0x224802, &(0x7f00000002c0)={[{@xino_auto, 0x3a}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@smackfshat={'smackfshat', 0x3d, 'mask'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@subj_role={'subj_role', 0x3d, ',\\\x97!##.#$-!-}$@,'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@dont_hash}], 0x2f}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)='$\x00\x00', 0x3}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x0, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x7, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x8000001, 0x5, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0xa, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x5, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x51) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) (async) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="1a040500c7ff03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r9, 0x1, 0x6, 0x6, @remote}, 0x14) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, 0x14, 0x1, 0x4, 0x25dfdbfe, {0x2}, [@typed={0x4}, @nested={0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') creat(&(0x7f0000000240)='./file1\x00', 0x0) fstat(0xffffffffffffffff, 0x0) lstat(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)) r1 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000540)=ANY=[@ANYBLOB="120100020000002082052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a00000b7f00090401efff01022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}}, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000480)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, 0x0) clock_nanosleep(0x1, 0x0, 0x0, 0x0) syz_usb_connect$uac2(0x0, 0x8b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000020532b2300400001020301090279000301fb4004080b02010103200109040000000101200009240108000c1900e508240a00040b060308240a0901030602090401000001022000090401010101022000090501"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x16b3, [{0x0, &(0x7f0000000080)=@lang_id={0x0, 0x3, 0x422}}, {0x0, &(0x7f00000000c0)=@string={0x0, 0x3, "cf6f39ef6bd8a0ab15f5e41d648876807d0e021e540b9b6c3bb530e121c652bb153767e06cca6d9b2ce82ed99c59f3c2e890aa26961507154e1ce5c5b091ba08e89d27f80f3cd02da279a4707137f7b3af6af9253a1974cd982b20ae7b37dec6526132257c8286c9bc7d9ff81e09e5431fac51f7e7b72e70f33135f393769d7e2c8167196acf90a260bdf09d16b21c190bddb25dedee04dff89b3a573d3c54e3cde345c2e688f53170b48d8eb2d9934ff6ac25c64f635d396dd7941f3fd61fb99b"}}]}) executing program 2: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000080)) (async, rerun: 64) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x100, r1, 0x301, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "327c42b6644a052df4593e78acbac5bc262b5f600fbd24a94f"}}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa56}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x8801) (async, rerun: 32) r2 = syz_open_dev$hidraw(&(0x7f00000002c0), 0x771f, 0x101440) (rerun: 32) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000300)="90d687d97bd243a3949473c653327da09844325884336a039682d6bf2e1654c0d28d4d92d5de0dcce8791add99111558f41767b9e7866b28b26f60accd09c763e8ebd40bd2d8501568839be6911853eca109826910943e66ac874b9ee08531943267fac7781e51bf900e7e2423778581e605a1b456eff8ff5859edcb2756ec5b842d7c88291ca7800a7014fb263afc2bc07d69cf5f52ed11d56a4e9443079a3cfe0c55c50c7c8b695024") r3 = syz_open_dev$hiddev(&(0x7f00000003c0), 0x1, 0x100) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000000400)={0x1, 0x3, 0x400}) (async) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3) (async) ioctl$KVM_GET_SREGS2(0xffffffffffffffff, 0x8140aecc, &(0x7f0000000440)) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000580)) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xfeac7ef430d44c4b}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x118, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffa}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x10}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40014}, 0x4000000) (async) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000800)='devices.list\x00', 0x0, 0x0) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, 0xfffffffffffffffd) (async) ioctl$TIOCGISO7816(r7, 0x80285442, &(0x7f0000000840)) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x6c, r6, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44}, 0x400) (async) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f00000009c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0xb5, 0x40, 0x4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '!'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x8, 0xd0, 0x6}, {0x6, 0x24, 0x1a, 0x2, 0x10}, [@acm={0x4, 0x24, 0x2, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0xfe, 0x1d, 0x2, 0x80}, @mbim={0xc, 0x24, 0x1b, 0xd, 0x74, 0x7f, 0x8, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x4, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x87, 0x1c, 0x1}}}}}}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x300, 0x9, 0x3, 0x9a, 0x40, 0x4}, 0xc9, &(0x7f0000000ac0)={0x5, 0xf, 0xc9, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x4, 0x1, 0x2}, @generic={0xba, 0x10, 0x3, "7dbb6718e270f52b4dc95e98b3c377f7faf551d5a54896bb392c2b59addc32f3dc325c0fb28f84045b0a9da7ed070ef5d9eb7d8ee8bc06a7450a280e801a869f79b486e2e8b94910687875837314279512da49a644a1f7cd7fd4d14c308a3818abdb35e7ef41679d3fa57c41134b560aa762cc92bbedec329b615beb744d2afc98d8ae9509c9debbbf7166ebf1dab013af39f6f63ca07b792ae60d74877e332d9069847628389b924e8e5060f39aa4c0f6eeb1ff828348"}]}, 0x5, [{0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x415}}, {0x7b, &(0x7f0000000c40)=@string={0x7b, 0x3, "1a5a05d2de756fd29453f0485a1a740505096f3527cf5cc0edd856ab7f8efed89f2e40dd58c7eff6848e210efc30fc0f984ea08a0a39228eca7a0520a7dd69b17752321a5ad208296878298560bbd9a59c87a3a67a58a268d22c583d89da1b4819706b9ad85a32a2a4ab2da32c1e8c68001534e90f93750b63"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x400a}}, {0xc4, &(0x7f0000000d00)=@string={0xc4, 0x3, "addeeb3feb91cb45594862a916871b557a1cea8133f3efb0725337a6637e866bd0231f1faf3d530b1002d6b8a09832e51d5b0f3acdcb82bde553afaf27f9b9a7b0530d94dd5d5550ead46b4b3b0fc5e3c98d89b05bef6818df0f32d839cc4a728963c7633653b3801ba1f58b08f1d2380b18475f9b3eddc17fbb2a872783caaf2042427356343235902e4490e3eb52f3918a6f62e289e054525c2114a40de55f08bae87275422eee7de8cb3971a43dd66c375abbfd54706d61741f4f54bca8ad9a1a"}}]}) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r8, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '{\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10008015}, 0x6000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000001140)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x48, r9, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x756, 0x6a}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008810}, 0x20008004) read$ptp(r7, &(0x7f0000001180)=""/209, 0xd1) (async, rerun: 32) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000012c0), 0xffffffffffffffff) (rerun: 32) sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x74, r11, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x18000000}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x10040010) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008890}, 0x0) (rerun: 32) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f0000000040)='./file2\x00', 0x0, 0xf3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x4c01, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) close(r1) executing program 0: capget(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x5, 0x6, 0x5, 0x2, 0x80000000, 0x2}) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x763, 0x2012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xe, 0x50, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20}}}}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) executing program 32: capget(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x5, 0x6, 0x5, 0x2, 0x80000000, 0x2}) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x763, 0x2012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xe, 0x50, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20}}}}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "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"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001"], 0x50}}, 0x0) read$rfkill(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000000)={0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r4, &(0x7f0000000000)="ff", 0x1001, 0x100000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="eaffff00000000ff"], 0x0}, 0x0) executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x3, 0xfffffffc, 0x3, 0x8}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000300)={0x4, 0x9dc5, 0x1fd, 0x0, 0x3}) executing program 2: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000206307122040000102030109021200010d0e503f09040000000103"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) program crashed: SYZFAIL: posix_spawnp failed bisect: the chunk can be dropped bisect: split chunks (needed=true): <13> bisect: split chunk #0 of len 13 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 2, 2, 23, 3, 3] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f0000000040)='./file2\x00', 0x0, 0xf3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x4c01, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) close(r1) executing program 0: capget(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x5, 0x6, 0x5, 0x2, 0x80000000, 0x2}) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x763, 0x2012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xe, 0x50, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20}}}}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) executing program 32: capget(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x5, 0x6, 0x5, 0x2, 0x80000000, 0x2}) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x763, 0x2012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xe, 0x50, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20}}}}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "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"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001"], 0x50}}, 0x0) read$rfkill(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000000)={0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r4, &(0x7f0000000000)="ff", 0x1001, 0x100000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="eaffff00000000ff"], 0x0}, 0x0) executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x3, 0xfffffffc, 0x3, 0x8}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000300)={0x4, 0x9dc5, 0x1fd, 0x0, 0x3}) executing program 2: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000206307122040000102030109021200010d0e503f09040000000103"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) program crashed: SYZFAIL: posix_spawnp failed bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <6> bisect: split chunk #0 of len 6 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 3, 3] detailed listing: executing program 2: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "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"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001"], 0x50}}, 0x0) read$rfkill(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000000)={0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r4, &(0x7f0000000000)="ff", 0x1001, 0x100000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="eaffff00000000ff"], 0x0}, 0x0) executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x3, 0xfffffffc, 0x3, 0x8}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000300)={0x4, 0x9dc5, 0x1fd, 0x0, 0x3}) executing program 2: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000206307122040000102030109021200010d0e503f09040000000103"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) program crashed: SYZFAIL: posix_spawnp failed bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <3> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-ioctl$BTRFS_IOC_BALANCE_PROGRESS-syz_usb_connect$midi detailed listing: executing program 2: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000206307122040000102030109021200010d0e503f09040000000103"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 3] detailed listing: executing program 2: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "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"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001"], 0x50}}, 0x0) read$rfkill(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000000)={0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r4, &(0x7f0000000000)="ff", 0x1001, 0x100000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="eaffff00000000ff"], 0x0}, 0x0) executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x3, 0xfffffffc, 0x3, 0x8}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000300)={0x4, 0x9dc5, 0x1fd, 0x0, 0x3}) program crashed: SYZFAIL: posix_spawnp failed bisect: the chunk can be dropped bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS detailed listing: executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x3, 0xfffffffc, 0x3, 0x8}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000300)={0x4, 0x9dc5, 0x1fd, 0x0, 0x3}) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$uac1-openat$full-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_GET-read$rfkill-mkdirat-mount-mkdirat-mount-bind$vsock_stream-mprotect-chdir-bind$inet6-sendmsg$TIPC_CMD_SHOW_NAME_TABLE-mprotect-syz_clone-ptrace-ptrace$getregset-openat-pwrite64-syz_usb_control_io$hid-syz_usb_control_io$hid detailed listing: executing program 2: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "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"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001"], 0x50}}, 0x0) read$rfkill(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000000)={0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r4, &(0x7f0000000000)="ff", 0x1001, 0x100000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="eaffff00000000ff"], 0x0}, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed bisect: the chunk can be dropped bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 1 programs left: executing program 2: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "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"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001"], 0x50}}, 0x0) read$rfkill(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000000)={0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r4, &(0x7f0000000000)="ff", 0x1001, 0x100000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="eaffff00000000ff"], 0x0}, 0x0) bisect: trying to concatenate bisect: concatenate 1 entries testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$uac1-openat$full-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_GET-read$rfkill-mkdirat-mount-mkdirat-mount-bind$vsock_stream-mprotect-chdir-bind$inet6-sendmsg$TIPC_CMD_SHOW_NAME_TABLE-mprotect-syz_clone-ptrace-ptrace$getregset-openat-pwrite64-syz_usb_control_io$hid-syz_usb_control_io$hid detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "fe3ff49705e0e2085a404c6931a4ce4b46a2cfef6f481e95e2dc182fdb819e825c9d9f1cc3fec1010018d5cc0b4c00ce284f8d53a1551af22c76abce41abf08b7703781ff3d7dec711634255b0bb5f2ddccb2df1f12dffffaf63529716e72ab3d6b48763d575f1a630d584ff9e2f5889f57ea1397df23fff07834b74851334ccc200f4a6b38fd2e02428d9a0c1fad5cdbfeadf8304ffd460d367d0aa6ade5fc511a20ec7f65adc04f08ced3d18b8bb7a19829a178a756faf89380c935b443bfe4db6cb50f4a8f7f37c643539360a3a6dc9ac62a632093d146555b3d4c358318533aee643029d0c115c5a0e20a0e10d67e248c37bb799309b8b8a63e0"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001"], 0x50}}, 0x0) read$rfkill(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000000)={0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r4, &(0x7f0000000000)="ff", 0x1001, 0x100000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="eaffff00000000ff"], 0x0}, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed bisect: concatenation succeeded found reproducer with 23 syscalls minimizing guilty program testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$uac1-openat$full-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_GET-read$rfkill-mkdirat-mount-mkdirat-mount-bind$vsock_stream-mprotect-chdir-bind$inet6-sendmsg$TIPC_CMD_SHOW_NAME_TABLE-mprotect-syz_clone-ptrace-ptrace$getregset-openat-pwrite64-syz_usb_control_io$hid detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "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"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001"], 0x50}}, 0x0) read$rfkill(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000000)={0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r4, &(0x7f0000000000)="ff", 0x1001, 0x100000) syz_usb_control_io$hid(r0, 0x0, 0x0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$uac1-openat$full-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_GET-read$rfkill-mkdirat-mount-mkdirat-mount-bind$vsock_stream-mprotect-chdir-bind$inet6-sendmsg$TIPC_CMD_SHOW_NAME_TABLE-mprotect-syz_clone-ptrace-ptrace$getregset-openat-pwrite64 detailed listing: executing program 0: syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "fe3ff49705e0e2085a404c6931a4ce4b46a2cfef6f481e95e2dc182fdb819e825c9d9f1cc3fec1010018d5cc0b4c00ce284f8d53a1551af22c76abce41abf08b7703781ff3d7dec711634255b0bb5f2ddccb2df1f12dffffaf63529716e72ab3d6b48763d575f1a630d584ff9e2f5889f57ea1397df23fff07834b74851334ccc200f4a6b38fd2e02428d9a0c1fad5cdbfeadf8304ffd460d367d0aa6ade5fc511a20ec7f65adc04f08ced3d18b8bb7a19829a178a756faf89380c935b443bfe4db6cb50f4a8f7f37c643539360a3a6dc9ac62a632093d146555b3d4c358318533aee643029d0c115c5a0e20a0e10d67e248c37bb799309b8b8a63e0"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001"], 0x50}}, 0x0) read$rfkill(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r3, &(0x7f0000000000)="ff", 0x1001, 0x100000) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$uac1-openat$full-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_GET-read$rfkill-mkdirat-mount-mkdirat-mount-bind$vsock_stream-mprotect-chdir-bind$inet6-sendmsg$TIPC_CMD_SHOW_NAME_TABLE-mprotect-syz_clone-ptrace-ptrace$getregset-openat detailed listing: executing program 0: syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "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"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001"], 0x50}}, 0x0) read$rfkill(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$uac1-openat$full-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_GET-read$rfkill-mkdirat-mount-mkdirat-mount-bind$vsock_stream-mprotect-chdir-bind$inet6-sendmsg$TIPC_CMD_SHOW_NAME_TABLE-mprotect-syz_clone-ptrace-ptrace$getregset detailed listing: executing program 0: syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "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"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001"], 0x50}}, 0x0) read$rfkill(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={0x0}) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$uac1-openat$full-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_GET-read$rfkill-mkdirat-mount-mkdirat-mount-bind$vsock_stream-mprotect-chdir-bind$inet6-sendmsg$TIPC_CMD_SHOW_NAME_TABLE-mprotect-syz_clone-ptrace detailed listing: executing program 0: syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "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"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001"], 0x50}}, 0x0) read$rfkill(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$uac1-openat$full-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_GET-read$rfkill-mkdirat-mount-mkdirat-mount-bind$vsock_stream-mprotect-chdir-bind$inet6-sendmsg$TIPC_CMD_SHOW_NAME_TABLE-mprotect-syz_clone detailed listing: executing program 0: syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "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"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001"], 0x50}}, 0x0) read$rfkill(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$uac1-openat$full-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_GET-read$rfkill-mkdirat-mount-mkdirat-mount-bind$vsock_stream-mprotect-chdir-bind$inet6-sendmsg$TIPC_CMD_SHOW_NAME_TABLE-mprotect-ptrace detailed listing: executing program 0: syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "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"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001"], 0x50}}, 0x0) read$rfkill(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace(0x10, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$uac1-openat$full-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_GET-read$rfkill-mkdirat-mount-mkdirat-mount-bind$vsock_stream-mprotect-chdir-bind$inet6-sendmsg$TIPC_CMD_SHOW_NAME_TABLE-syz_clone-ptrace detailed listing: executing program 0: syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "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"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001"], 0x50}}, 0x0) read$rfkill(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r2 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$uac1-openat$full-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_GET-read$rfkill-mkdirat-mount-mkdirat-mount-bind$vsock_stream-mprotect-chdir-bind$inet6-syz_clone-ptrace detailed listing: executing program 0: syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "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"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001"], 0x50}}, 0x0) read$rfkill(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$uac1-openat$full-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_GET-read$rfkill-mkdirat-mount-mkdirat-mount-bind$vsock_stream-mprotect-chdir-syz_clone-ptrace detailed listing: executing program 0: syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "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"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001"], 0x50}}, 0x0) read$rfkill(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$uac1-openat$full-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_GET-read$rfkill-mkdirat-mount-mkdirat-mount-bind$vsock_stream-mprotect-syz_clone-ptrace detailed listing: executing program 0: syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "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"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001"], 0x50}}, 0x0) read$rfkill(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$uac1-openat$full-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_GET-read$rfkill-mkdirat-mount-mkdirat-mount-bind$vsock_stream-chdir-syz_clone-ptrace detailed listing: executing program 0: syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "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"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001"], 0x50}}, 0x0) read$rfkill(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) chdir(&(0x7f0000000140)='./file0\x00') r2 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$uac1-openat$full-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_GET-read$rfkill-mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone-ptrace detailed listing: executing program 0: syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "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"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001"], 0x50}}, 0x0) read$rfkill(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$uac1-openat$full-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_GET-read$rfkill-mkdirat-mount-mkdirat-mprotect-chdir-syz_clone-ptrace detailed listing: executing program 0: syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "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"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001"], 0x50}}, 0x0) read$rfkill(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$uac1-openat$full-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_GET-read$rfkill-mkdirat-mount-mount-mprotect-chdir-syz_clone-ptrace detailed listing: executing program 0: syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "fe3ff49705e0e2085a404c6931a4ce4b46a2cfef6f481e95e2dc182fdb819e825c9d9f1cc3fec1010018d5cc0b4c00ce284f8d53a1551af22c76abce41abf08b7703781ff3d7dec711634255b0bb5f2ddccb2df1f12dffffaf63529716e72ab3d6b48763d575f1a630d584ff9e2f5889f57ea1397df23fff07834b74851334ccc200f4a6b38fd2e02428d9a0c1fad5cdbfeadf8304ffd460d367d0aa6ade5fc511a20ec7f65adc04f08ced3d18b8bb7a19829a178a756faf89380c935b443bfe4db6cb50f4a8f7f37c643539360a3a6dc9ac62a632093d146555b3d4c358318533aee643029d0c115c5a0e20a0e10d67e248c37bb799309b8b8a63e0"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001"], 0x50}}, 0x0) read$rfkill(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$uac1-openat$full-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_GET-read$rfkill-mkdirat-mkdirat-mount-mprotect-chdir-syz_clone-ptrace detailed listing: executing program 0: syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "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"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001"], 0x50}}, 0x0) read$rfkill(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$uac1-openat$full-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_GET-read$rfkill-mount-mkdirat-mount-mprotect-chdir-syz_clone-ptrace detailed listing: executing program 0: syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "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"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001"], 0x50}}, 0x0) read$rfkill(r0, 0x0, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$uac1-openat$full-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_GET-mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone-ptrace detailed listing: executing program 0: syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "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"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280050001"], 0x50}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$uac1-openat$full-socket$nl_netfilter-mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone-ptrace detailed listing: executing program 0: syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "fe3ff49705e0e2085a404c6931a4ce4b46a2cfef6f481e95e2dc182fdb819e825c9d9f1cc3fec1010018d5cc0b4c00ce284f8d53a1551af22c76abce41abf08b7703781ff3d7dec711634255b0bb5f2ddccb2df1f12dffffaf63529716e72ab3d6b48763d575f1a630d584ff9e2f5889f57ea1397df23fff07834b74851334ccc200f4a6b38fd2e02428d9a0c1fad5cdbfeadf8304ffd460d367d0aa6ade5fc511a20ec7f65adc04f08ced3d18b8bb7a19829a178a756faf89380c935b443bfe4db6cb50f4a8f7f37c643539360a3a6dc9ac62a632093d146555b3d4c358318533aee643029d0c115c5a0e20a0e10d67e248c37bb799309b8b8a63e0"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$uac1-openat$full-mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone-ptrace detailed listing: executing program 0: syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "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"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_connect$uac1-mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone-ptrace detailed listing: executing program 0: syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x4711, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x71, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3e76, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x8, "9b01", "0abe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xf3, 0x81, {0x7, 0x25, 0x1, 0xc, 0xf, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x50, 0x4, 0x3, 0x7f, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf65, 0x0, 0x3, "992a5954e5f26d4a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x3, 'PQ', '/p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xa, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8c, 0x5, 0x2, 0x40, 0x6}, 0x1e, &(0x7f0000000100)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xd4, 0x2, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x3, 0x6, 0x3}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x449}}, {0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "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"}}, {0x3b, &(0x7f0000000340)=@string={0x3b, 0x3, "b67185fb0954577d03996ec2e8a4fbd94fd88e3e68433b5f4f23bbf54e7e436d134dc306c0c55068cc6c3f8c81e5aaa4cb47186a78852014c7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone-ptrace detailed listing: executing program 0: syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone-ptrace detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone-ptrace detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone-ptrace detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone-ptrace detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone-ptrace detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone-ptrace detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone-ptrace detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone-ptrace detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', 0x0, 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone-ptrace detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(0x0) r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) program did not crash extracting C reproducer testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone-ptrace program did not crash simplifying guilty program options testing program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone-ptrace detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) program crashed: SYZFAIL: open(/proc/self/ns/net) failed extracting C reproducer testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone-ptrace program did not crash testing program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone-ptrace detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) program did not crash testing program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone-ptrace detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) program crashed: SYZFAIL: posix_spawnp failed extracting C reproducer testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone-ptrace program did not crash testing program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone-ptrace detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) program crashed: SYZFAIL: posix_spawnp failed validation run: crashed=true testing program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone-ptrace detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) program crashed: SYZFAIL: posix_spawnp failed validation run: crashed=true testing program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-mprotect-chdir-syz_clone-ptrace detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) program crashed: SYZFAIL: posix_spawnp failed validation run: crashed=true reproducing took 54m46.546242657s repro crashed as (corrupted=false): SYZFAIL: posix_spawnp failed (errno 2: No such file or directory) connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF final repro crashed as (corrupted=false): SYZFAIL: posix_spawnp failed (errno 2: No such file or directory) connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF