Extracting prog: 15m29.860089421s Minimizing prog: 53m7.819967559s Simplifying prog options: 7m30.88092583s Extracting C: 3m16.183556574s Simplifying C: 0s extracting reproducer from 30 programs testing a last program of every proc single: executing 5 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$AUTOFS_DEV_IOCTL_EXPIRE-ioctl$TIOCPKT-ioctl$VIDIOC_SUBDEV_G_CROP-ioctl$sock_ipv6_tunnel_SIOCGET6RD-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_STREAMOFF-ioctl$UI_SET_PROPBIT-syz_socket_connect_nvme_tcp-openat$vcs-clock_gettime-ppoll-ioctl$TIOCCBRK-writev-ioctl$AUTOFS_DEV_IOCTL_PROTOVER-ioctl$KDDISABIO-open_tree-syz_genetlink_get_family_id$ipvs-sendmsg$IPVS_CMD_NEW_DAEMON-futex_waitv-ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL-sendmsg$nl_route-recvfrom-clock_gettime-recvmmsg-ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL-ioctl$AUTOFS_DEV_IOCTL_REQUESTER-setsockopt$inet6_IPV6_IPSEC_POLICY-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN detailed listing: executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x3) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000080)={0x1, 0x0, {0x8, 0x7f, 0x7c2, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x10, 0x7, 0x700000, 0xfa, {{0xa, 0x4, 0x3, 0x2e, 0x28, 0x68, 0x0, 0x5, 0x29, 0x0, @rand_addr=0x64010100, @empty, {[@generic={0x44, 0x12, "aa6e2ae553ca0cb2077be4fd9387ff5d"}]}}}}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x53c2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x64, &(0x7f00000001c0)=""/100, 0x41000, 0x72, '\x00', r1, 0x0, r0, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000340)=[r0], &(0x7f0000000380)=[{0x0, 0x3, 0xf, 0x3}, {0x5, 0x1, 0xb, 0x8}, {0x5, 0x800, 0xa}, {0x2, 0x4, 0x2, 0x5a3b26b9c52babf8}, {0x4, 0x5, 0xf, 0xc}], 0x10, 0x5}, 0x94) r3 = syz_open_dev$vim2m(&(0x7f00000004c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000500)) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0xa) r4 = syz_socket_connect_nvme_tcp() r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x80483, 0x0) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) ppoll(&(0x7f0000000580)=[{r0, 0xac}, {r0, 0x106}, {r4}, {r2, 0x110a}, {r5, 0x1}, {r2, 0x2000}, {r3, 0x4040}], 0x7, &(0x7f0000000600)={r6, r7+10000000}, &(0x7f0000000640)={[0x5]}, 0x8) ioctl$TIOCCBRK(r0, 0x5428) writev(r5, &(0x7f0000000700)=[{&(0x7f0000000680)="377497757f1671a199d3674818eb17ddbe92aebbba7e2ec7f5143752977708a4d1adb531e686bff302df4d8ff928ffa9321fc2fabed6008313f95f177d059e54f770590ef303370acbcd56c4a5d0de8efc7f63480817516043b1c09bb5bc377d2d7bef1a42e9f2", 0x67}], 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000740)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) ioctl$KDDISABIO(r8, 0x4b37) r9 = open_tree(r5, &(0x7f0000000780)='./file0\x00', 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r5) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x60, r10, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3b}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff800}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x40) futex_waitv(&(0x7f0000002300)=[{0x6, &(0x7f0000000940)=0x7f, 0x82}, {0x8, &(0x7f0000000980)=0x1000, 0x82}, {0x81, &(0x7f00000009c0)=0xbc, 0x2}, {0x7, &(0x7f0000000a00)=0x3023, 0x82}, {0xa, &(0x7f0000000a40)=0x25e1b6f5, 0x2}, {0x9, &(0x7f0000000a80)=0x101, 0x2}, {0x1, &(0x7f0000000ac0)=0x20000000000, 0x82}, {0x5, &(0x7f0000000b00), 0x2}, {0x6, &(0x7f0000000b40)=0xfffffffffffffffc, 0x2}, {0x1a6c9cbb, &(0x7f0000000b80)=0x2, 0x2}, {0x6, &(0x7f0000000bc0)=0x9, 0x2}, {0x8000000000000000, &(0x7f0000000c00)=0x7a0, 0x2}, {0x5, &(0x7f0000000c40)=0x7, 0x2}, {0x7, &(0x7f0000000c80)=0x5, 0x82}, {0x8, &(0x7f0000000cc0), 0x82}, {0x5, &(0x7f0000000d00)=0x9, 0x2}, {0x0, &(0x7f0000000d40)=0x4be8}, {0x968, &(0x7f0000000d80)=0x2, 0x2}, {0x5, &(0x7f0000000dc0)=0x5, 0x2}, {0x9, &(0x7f0000000e00)=0x100, 0x82}, {0x9, &(0x7f0000000e40)=0xdede, 0x2}, {0x2, &(0x7f0000000e80)=0x8000000000000001, 0x82}, {0x2, &(0x7f0000000ec0)=0xffffffff, 0x2}, {0x3, &(0x7f0000000f00), 0x2}, {0x1a89, &(0x7f0000000f40)=0x5, 0x2}, {0x6645, &(0x7f0000000f80)=0x4, 0x82}, {0xff, &(0x7f0000000fc0)=0x8000, 0x2}, {0x2, &(0x7f0000001000)=0x7ff, 0x2}, {0x2, &(0x7f0000001040)=0x5, 0x82}, {0xfffffffffffff5fe, &(0x7f0000001080)=0x6, 0x2}, {0x7, &(0x7f00000010c0)=0x7fff, 0x2}, {0x6, &(0x7f0000001100)=0x3, 0x82}, {0x2, &(0x7f0000001140)=0x55480606, 0x2}, {0x1, &(0x7f0000001180)=0xdf9, 0x2}, {0x200, &(0x7f00000011c0)=0x9, 0x82}, {0x9, &(0x7f0000001200)=0x7f, 0x1}, {0xb, &(0x7f0000001240)=0x329, 0x82}, {0x5, &(0x7f0000001280)=0x8, 0x82}, {0x8001, &(0x7f00000012c0)=0xf37, 0x82}, {0x2, &(0x7f0000001300), 0x2}, {0x1, &(0x7f0000001340)=0x7, 0x2}, {0x2d, &(0x7f0000001380)=0xba, 0x82}, {0x0, &(0x7f00000013c0)=0x3, 0x2}, {0x8, &(0x7f0000001400)=0x2, 0x82}, {0x547fb2c7, &(0x7f0000001440)=0x9, 0x82}, {0x9, &(0x7f0000001480)=0xffff, 0x82}, {0x4000000000, &(0x7f00000014c0)=0x3a1, 0x82}, {0x7, &(0x7f0000001500)=0xa, 0x82}, {0x40, &(0x7f0000001540)=0x1000, 0x82}, {0x1, &(0x7f0000001580)=0x9, 0x82}, {0xc302, &(0x7f00000015c0)=0x5, 0x82}, {0x2, &(0x7f0000001600)=0x7, 0x2}, {0xfff, &(0x7f0000001640)=0x60be, 0x82}, {0x100, &(0x7f0000001680)=0x8000000000, 0x2}, {0x100000001, &(0x7f00000016c0)=0x7fffffff, 0x82}, {0x0, &(0x7f0000001700)=0x2}, {0x8, &(0x7f0000001740)=0xffffffffffffffff, 0x82}, {0xd2, &(0x7f0000001780)=0x5, 0x2}, {0xfffffffffffffffa, &(0x7f00000017c0)=0x7, 0x2}, {0x6, &(0x7f0000001800)=0x6, 0x2}, {0x8001, &(0x7f0000001840)=0x81, 0x2}, {0xd, &(0x7f0000001880)=0xf3, 0x2}, {0x2, &(0x7f00000018c0)=0x2, 0x82}, {0x10001, &(0x7f0000001900)=0x9, 0x2}, {0x4, &(0x7f0000001940)=0x7, 0x82}, {0x6, &(0x7f0000001980)=0x1, 0x82}, {0x1, &(0x7f00000019c0)=0x9, 0x82}, {0x9, &(0x7f0000001a00)=0x81, 0x82}, {0x3, &(0x7f0000001a40)=0xb, 0x82}, {0x1, &(0x7f0000001a80)=0x8, 0x2}, {0x8, &(0x7f0000001ac0)=0x2, 0x2}, {0x5, &(0x7f0000001b00)=0x2}, {0x7, &(0x7f0000001b40)=0x8, 0x82}, {0x5, &(0x7f0000001b80)=0x6, 0x2}, {0x6, &(0x7f0000001bc0)=0x9, 0x82}, {0x6, &(0x7f0000001c00)=0x6, 0x2}, {0x4, &(0x7f0000001c40)=0x2, 0x2}, {0xfff, &(0x7f0000001c80)=0xfffffffffffffffd, 0x82}, {0x3, &(0x7f0000001cc0)=0x3, 0x2}, {0x3bd, &(0x7f0000001d00)=0x9, 0x2}, {0x3, &(0x7f0000001d40)=0x1, 0x2}, {0x2, &(0x7f0000001d80)=0x1, 0x2}, {0x0, &(0x7f0000001dc0)=0xf, 0x2}, {0x4, &(0x7f0000001e00)=0x10000, 0x82}, {0x800, &(0x7f0000001e40)=0x9, 0x82}, {0x3, &(0x7f0000001e80)=0x8, 0x82}, {0x0, &(0x7f0000001ec0)=0x2, 0x82}, {0xffffffffffffff7e, &(0x7f0000001f00)=0x9, 0x2}, {0x6, &(0x7f0000001f40)=0x2, 0x82}, {0x7, &(0x7f0000001f80)=0xffffffff7fffffff, 0x82}, {0x10, &(0x7f0000001fc0), 0x82}, {0x5, &(0x7f0000002000)=0x6, 0x82}, {0x7, &(0x7f0000002040)=0x6, 0x82}, {0x3, &(0x7f0000002080)=0x1, 0x82}, {0x0, &(0x7f00000020c0)=0x9, 0x2}, {0x8f, &(0x7f0000002100)=0x8, 0x2}, {0xfff, &(0x7f0000002140)=0x9, 0x2}, {0x0, &(0x7f0000002180)=0x100000001, 0x82}, {0x5cb, &(0x7f00000021c0)=0x5, 0x2}, {0x3, &(0x7f0000002200), 0x82}, {0x9, &(0x7f0000002240)=0x5, 0x2}, {0x10000, &(0x7f0000002280)=0x5, 0x2}, {0xff00000, &(0x7f00000022c0)=0x98, 0x2}], 0x67, 0x0, &(0x7f0000002cc0)={0x77359400}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000002dc0)={'ip6_vti0\x00', &(0x7f0000002d40)={'ip6tnl0\x00', r1, 0x2f, 0x2, 0x3, 0x1, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x40}, 0x7800, 0x7800, 0x2, 0x3}}) sendmsg$nl_route(r0, &(0x7f0000002f80)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002e00)=@RTM_NEWMDB={0x138, 0x54, 0x4, 0x70bd2d, 0x25dfdbfd, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x0, 0x2, 0x3, {@in6_addr=@mcast2}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x2, 0x3, {@ip4=@private=0xa010102, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x2, 0x0, {@ip4=@remote, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x3, 0x3, {@ip4=@multicast1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x2, 0x4, {@ip4=@local}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x0, 0x2, {@ip4=@broadcast, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x3, 0x0, {@ip4=@empty, 0x10dba}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x3, 0x2, {@ip4=@multicast1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x1, 0x0, {@ip4=@multicast2, 0x800}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004005}, 0x80) recvfrom(r4, &(0x7f0000002fc0)=""/41, 0x29, 0x140, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000008d80)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000008bc0)=[{{&(0x7f0000003000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000003240)=[{&(0x7f0000003080)=""/99, 0x63}, {&(0x7f0000003100)=""/177, 0xb1}, {&(0x7f00000031c0)=""/98, 0x62}], 0x3, &(0x7f0000003280)=""/210, 0xd2}, 0x80000000}, {{&(0x7f0000003380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/57, 0x39}, {&(0x7f0000003440)=""/72, 0x48}, {&(0x7f00000034c0)=""/175, 0xaf}, {&(0x7f0000003580)=""/57, 0x39}, {&(0x7f00000035c0)=""/250, 0xfa}], 0x5, &(0x7f0000003740)=""/202, 0xca}, 0x4}, {{&(0x7f0000003840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000039c0)=[{&(0x7f00000038c0)=""/224, 0xe0}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000003a00)=""/79, 0x4f}, {&(0x7f0000003a80)=""/161, 0xa1}, {&(0x7f0000003b40)=""/121, 0x79}, {&(0x7f0000003bc0)=""/234, 0xea}, {&(0x7f0000003cc0)=""/70, 0x46}], 0x5, &(0x7f0000003dc0)=""/60, 0x3c}, 0x8}, {{0x0, 0x0, &(0x7f0000006100)=[{&(0x7f0000003e00)=""/90, 0x5a}, {&(0x7f0000003e80)=""/42, 0x2a}, {&(0x7f0000003ec0)=""/147, 0x93}, {&(0x7f0000003f80)=""/12, 0xc}, {&(0x7f0000003fc0)=""/2, 0x2}, {&(0x7f0000004000)=""/225, 0xe1}, {&(0x7f0000004100)=""/4096, 0x1000}, {&(0x7f0000005100)=""/4096, 0x1000}], 0x8, &(0x7f0000006180)=""/9, 0x9}, 0x3}, {{0x0, 0x0, &(0x7f00000076c0)=[{&(0x7f00000061c0)=""/216, 0xd8}, {&(0x7f00000062c0)=""/146, 0x92}, {&(0x7f0000006380)=""/160, 0xa0}, {&(0x7f0000006440)=""/160, 0xa0}, {&(0x7f0000006500)=""/50, 0x32}, {&(0x7f0000006540)=""/4096, 0x1000}, {&(0x7f0000007540)=""/207, 0xcf}, {&(0x7f0000007640)=""/81, 0x51}], 0x8}, 0x200}, {{&(0x7f0000007740)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000008ac0)=[{&(0x7f00000077c0)}, {&(0x7f0000007800)=""/4096, 0x1000}, {&(0x7f0000008800)=""/234, 0xea}, {&(0x7f0000008900)=""/116, 0x74}, {&(0x7f0000008980)=""/7, 0x7}, {&(0x7f00000089c0)=""/176, 0xb0}, {&(0x7f0000008a80)=""/23, 0x17}], 0x7, &(0x7f0000008b40)=""/80, 0x50}, 0x100000}], 0x7, 0x0, &(0x7f0000008dc0)={r12, r13+60000000}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000008e80)={'ip6tnl0\x00', &(0x7f0000008e00)={'syztnl0\x00', r11, 0x4, 0x3, 0x0, 0x6, 0x14, @loopback, @private1, 0x1, 0x20, 0x4, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000008ec0)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000008f00)={{{@in=@multicast2, @in6=@mcast2, 0x4e20, 0x2, 0x4e23, 0x0, 0x2, 0x20, 0x0, 0x0, r14, r16}, {0x4, 0x39ff000, 0x1, 0x3, 0x100, 0x7, 0xfffffffffffff713, 0x6}, {0xd, 0x7, 0x2d, 0xffffffff}, 0x8001, 0x6e6bbc, 0x1, 0x1, 0x2, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4d5, 0x2b}, 0xa, @in=@multicast1, 0x0, 0x0, 0x1, 0x8, 0x4, 0x800}}, 0xe8) r17 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000a280)={0x18, 0x1c, &(0x7f0000009040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @ldst={0x0, 0x2, 0x1, 0xb, 0x5, 0xffffffffffffffff, 0xfffffffffffffff0}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xd}, @generic={0x5d, 0xc, 0x2, 0x7ff, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000009140)='GPL\x00', 0x6, 0x1000, &(0x7f0000009180)=""/4096, 0x41000, 0x16, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f000000a180)={0x0, 0x3}, 0x8, 0x10, &(0x7f000000a1c0)={0x1, 0x4, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f000000a200)=[r8], &(0x7f000000a240)=[{0x1, 0x3, 0x9, 0x6}, {0x1, 0x2, 0x5, 0x4}, {0x4, 0x3, 0x7, 0xc}]}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f000000a340)={&(0x7f0000009000)='damon_aggregated\x00', r17, 0x0, 0x1ab}, 0x18) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-syz_open_dev$video4linux-ioctl$VIDIOC_TRY_DECODER_CMD-mkdir-chroot-fcntl$lock-openat$tun-ioctl$TUNSETIFF-openat$tun-close-socket$nl_generic-syz_genetlink_get_family_id$tipc-sendmsg$TIPC_CMD_ENABLE_BEARER-ioctl$SIOCSIFHWADDR-openat$tun-close-socket$nl_route-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-ioctl$SIOCSIFHWADDR-mount$overlay-openat$rfkill-socket-setsockopt$inet6_MCAST_MSFILTER-sendmsg$nl_route_sched-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_DEAUTHENTICATE detailed listing: executing program 0: mkdir(&(0x7f0000001080)='./file0\x00', 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc038563b, &(0x7f0000000080)={0x0, 0x2, @raw_data=[0x7, 0x5, 0x26, 0x38, 0xfffffffb, 0x6, 0xc3b, 0xc8, 0x6de9, 0x7, 0xfffffff7, 0x5, 0x6, 0x0, 0xff4, 0x401]}) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) chroot(&(0x7f0000000100)='./bus\x00') fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x181bc0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x200006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000091}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r8, {}, {0xb, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x808, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x2, 0x1, {0xffff1c72, 0x10000003, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008810}, 0x8000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x404, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x26001, 0x0) r9 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000000840)=ANY=[], 0x210) sendmsg$nl_route_sched(r9, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x600, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xfff2, 0xffe0}, {0x7}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0xc1) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r10, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x21, 0x1c}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xd, 0x34, @random="3c4e65277debee1f35"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$sndctrl-ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE-fsopen-fsconfig$FSCONFIG_SET_FLAG-socket$nl_generic-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_mesh-sendmsg$BATADV_CMD_SET_MESH-socket$nl_route-ioctl$ifreq_SIOCGIFINDEX_batadv_mesh-sendmsg$nl_route-fsmount-madvise-socket$kcm-sendmsg$kcm-userfaultfd-socket$nl_generic-syz_genetlink_get_family_id$ethtool-syz_init_net_socket$802154_dgram-connect-sendmsg$ETHTOOL_MSG_COALESCE_SET-bind$netlink-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-ioctl$UFFDIO_COPY-fsconfig$FSCONFIG_CMD_RECONFIGURE-setsockopt$packet_int-recvfrom$inet-syz_open_dev$loop-ioctl$LOOP_SET_STATUS detailed listing: executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x3, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x40, 0x8, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4000000000000000, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x8001, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0x3, 0x1, 0x4000, 0xfffffffffffffffe, 0x0, 0x0, 0x2]}) r1 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000e40)=ANY=[@ANYBLOB="2c00000076ae9bd8af9b9b92b73024b52ff1c75b389bb4af4070e0383c8e9c5bc544856e6f0758761cfc42ef97d04df5a94736a769a7baa0640765fefeac82645b635ff74e58a0534cc87412477cb01b70427dcc7cec9c0e43ba92c5fa75e6da32a4325163b629f62c1f9ee128e216839c4ad286b33284d791e82e5948cfe5acbed9ef1204d26aff86e4dc8db919dee50f258e82c70fe8e224a466e29a601a1ad1262aa935aa187004ee4c564db855673f850ba649f8de8e3fdb753b383887", @ANYRES16=r3, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYRES32=r4, @ANYBLOB="0500330001000000"], 0x2c}}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r7 = fsmount(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000300)="3e03bf40e733ef93012f997edf26de", 0xf}, {&(0x7f0000000a40)="19a58c380094d99c17c0d2e2d01f00cee989b9687810301d82c9c946831a0c1bb139974c7a984eb6ae1ec1428e5c1636064dcca2e6f8f9fc4dec9fb99ae8cda4f963437d52973f887885fefd0598a1a6a8e9b8c14046ec0853fb7b249f3f0f7fa0e5d1db73f4598d5208a08276b534e0febdb0928dd5ea88089b33e8a1a7d6a457bfaff289398076d79ff4d9ce50011fc5b68e7a9b36b5e2f523038cc5786e7a5e4003a1e564bab00146771c9c6f663854bd6d52f492d3a0a02eea3542a896cdfd291f178f03", 0xc6}, {&(0x7f0000000b40)="2c65ea07468a286bb78f4de506bd68f8eb7687c4b459d8cf887f8550ebc61fb4759d2d451d08e9a67b2fc3778430f7a602c79f4bafac2b5b0d090e42132157348d06620befbe2ff2facbdbab2a7cca247675a41d1bdb9613ab3f9bed3ace9c1bc77a9cd78c10d49af0dc567191215933ffd7c58b60ec2e27c68a463eb5197b675704372bb3d609c6d286be021f2d889949e77d419510cf87564501f3dba2cd1a12626281b03dc5a6887c14a2e9e0a205fbbe019fe466643b42a03dfe64f2b7ee84652c38d5c838c9b617be96097debfd12d6", 0xd2}, {&(0x7f0000000340)="9f68a2", 0x3}, {&(0x7f0000000380)="2b6a8fb998c89d8516f7ce75cb8d61c805d2d2c7929c9220e1f864421921a80d7e9849c10eaeba40ee2bfd8cc08b3387706c5aa5b009556b2ec2286ff97839399c796e5c5eb5dc8aa818b4ff4a981de503df541eb5f298029cd1", 0x5a}, {&(0x7f0000000c40)="11c8c3ebd6b7e124338a2b8428f37a13e4c121039d4ca4e0e20d6d3fd2130262e5ef502bcc59da6b235cdb98214ffae03b7e9862bb3b8f6288bc99a4b8173a7f2677545247f24d1c244c0ed5ca64ac6e0ef979d93fe4b2f9467de35bbc7aefaf520a8752dbbb45496b2cb79c4264fa5940bfbe1224f92597e458e57d8ecceefe3ed4f7adf19f8ec1c63d4c5eb61b6cb207e48636f7", 0x95}, {&(0x7f0000000d00)="8e3d0015067ac29c0d346955d692f571fb10dbf753a948525a95a4a11872e3b414ed3cc525766e5b9d69d5bd5f6024d0331e09d616d86300c9b436e36820525c41975be7c4cf554c707dbcc0f1e33144a5e224bc30e2ed2587f2d470525c637f6242a1021793123f4e3a034abd8f56652d0e3471030aeee00363bd55be77580f0e68cdd41bf6f0a332fb502495c21ed046cd15b4c9fa7eb9f233d457e93551c6e1ab20", 0xa3}], 0x7, 0x0, 0x0, 0x7400}, 0x40094) r9 = userfaultfd(0x80001) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r11, &(0x7f0000000100)=@nl=@unspec, 0x80) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRESOCT=r11, @ANYBLOB="010027bd7000000000001400000018000180140002006e657464657673696d3000000000000005000c000300000008001600ffffffff080003000d00000008000f00050000000800040019dc0000050019"], 0x5c}}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5a8}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r9, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) setsockopt$packet_int(r7, 0x107, 0xb, &(0x7f0000000240)=0x66, 0x4) recvfrom$inet(r7, &(0x7f0000000140)=""/142, 0x8e, 0x1, &(0x7f0000000200)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf2}}, 0x10) r12 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x101000) ioctl$LOOP_SET_STATUS(r12, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x3, 0x0, 0x8, 0x9, "188e914be2c7ac1196f7cfdd99303e5bb9b3308a72ce926228cacee134a0a354c4b126d8aee30349b8036aa09f2b32bad1070038d3336c1051017393804642dc", "16d2bf241787de0938d0260c1bd05a655ea06225c9f465552c008569eaf9f714", [0x9, 0x4]}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open-syz_emit_ethernet-fcntl$setlease-open-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_usb_connect-syz_open_dev$I2C-sched_setscheduler-prctl$PR_SCHED_CORE-sched_setaffinity-syz_open_dev$MSR-read$msr-socket$key-sendmsg$key-syz_emit_vhci-futex-bpf$PROG_LOAD-socket$kcm-socket$netlink-bpf$PROG_LOAD detailed listing: executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@random="0f539af21094", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x1, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc}}]}]}}}}}}}, 0x0) fcntl$setlease(r0, 0x400, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000008000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x1}, 0x94) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x82083) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x4, 0x0, 0xe, 0xa, 0x0, 0x0, 0xfffffffe, [@sadb_address={0x3, 0x6, 0xff, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010102}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x4, 0xf}, @sadb_address={0x3, 0x5, 0x33, 0x0, 0x0, @in={0x2, 0x0, @private=0xa010100}}]}, 0x50}, 0x1, 0x7}, 0x4000000) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO-socket$inet6_udp-openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-eventfd-ioctl$KVM_HYPERV_EVENTFD-prctl$PR_SCHED_CORE-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-fsopen-fsconfig$FSCONFIG_CMD_CREATE-socket$inet6_udp-socket$nl_generic-syz_genetlink_get_family_id$l2tp-socket$nl_route-sendmsg$nl_route-fsmount-fchdir-symlink-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-memfd_create detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x2, r3}) r4 = eventfd(0xffffffff) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000240)={0x2, r4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000ffff23bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14000400011a04001c00128009000100626f6e64000000000c0002800800aba772bd0000"], 0x3c}, 0x1, 0x0, 0x0, 0xc0814}, 0x20040040) r9 = fsmount(r7, 0x0, 0x80) fchdir(r9) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r10 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r10, 0x3518, 0xaddf, 0x2, 0x0, 0x0) memfd_create(&(0x7f0000000100)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 30s testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 4, 30, 30, 24, 23, 30, 20, 3, 30, 28, 29, 5, 12, 30, 12, 17, 30, 24, 30, 5, 30, 18, 20, 4, 40, 30, 29, 20, 30] detailed listing: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x301, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4004) r2 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) tkill(r2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) mlock(&(0x7f00009be000/0x3000)=nil, 0x3000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, &(0x7f0000000200)={0x20, 0x4, 0x2, {0x2, 0xe}}, &(0x7f0000000440)={0x0, 0x3, 0xf0, @string={0xf0, 0x3, "e6cb904ac2bc9535f690cbedef87a5955382e3e2cc4f0f7a9ee651931ebd64e1c4a63c28dde69e59205e43b8e9cb4f884f668634d9ea39207296e0ed32abb1109188d9638f12f5b0dc74dfa91cb0e155926ccac858454528a49aeb8791cb5269b4f87a56a74482b2a1204597fba6f89f52d350dca4999753dc51aba68644575fe4401a14b01aa4bcde9b6863d80d495a3818ef02199c4ee992c6ced9a4d7c29ba4301fbef4c4233dd26498d354a1f77f1fa7def49c26b6f5d717ded52a29549fa5a2baf6e5d0b0629b2b4d71a187d0d3b3415b384860d7b5a1ae983bd875c1475bd6c5d11e33a7156667aa0c192b"}}, 0x0, 0x0}, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) ioctl$VIDIOC_REQBUFS(r5, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x810, 0xffffffffffffffff, 0x3a8bc000) iopl(0x7f) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52ba}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000006c0)="00000000000000c88526faac0646", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) getsockopt$ax25_int(r1, 0x101, 0x5, &(0x7f00000002c0), &(0x7f0000000300)=0x4) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r3, 0xfffff000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) r6 = openat$binfmt_format(0xffffff9c, &(0x7f0000000500)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r6, &(0x7f00000002c0)='0\x00', 0x1) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000400)="060000000000000088fca3d6a0557f3f639b0f989d41ecb5c16f8ffaca19ed02909bb1a25e8568600f7c2b4d395b957620cd2882967b8d1f55db7c394896ce4867b8b2d8095ab9f6880956b3e0795dcf393391b51810a107078f5b149bbcec5d5becdf7c019eebbbcfe1fb2b3558d4dfbb8b2186b9bcbb0f869e991855a1b8fbc309e7", 0x83, 0x4004, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6}}}, 0xa) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x29, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xf, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB='|\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000006000058054000280080004004b00000008000300020000000800040060000000080003000400000008000300040000000800020099d8000008000100040000000800020008000000080001001400000008000300060000000700010069620000"], 0x74}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000280)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="8e0000cf5db07000dde9fcca31b1aca24b8dbe76fc229cd726670537c861408a4b9286c40897611e3c5163ae15d83387c3149f25eff71c6d9da846b54d93fc2150fa5c175a3e90825b1da3d361f731bda53378f1d398f0da80a16620fee4b992dfddde986b9461a3ad59f68052b8a25e14417a40ec18197cdf83bc65bc26f6fa5a33443322cc309828dddeb86f774dc23525ac2a47b9caf747d309fa13b469b540d42c391d", @ANYRES16, @ANYBLOB="65f928bd7000ffdbdf25090000005c00068008000100010000004700040067636d28616573290000000000000000000000000000000000000000000000001f00000064a438ae457c614070352eb996e0a31d210bbdc24687168b2dcf1045bddc3f000800010002000000"], 0x70}, 0x1, 0x0, 0x0, 0x44}, 0x4000040) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000000)=0x5, 0x4) r2 = accept(0xffffffffffffffff, &(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x80) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x103040, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000140)={"2b5a04018aa3fe766efe33026c07021f67913ea85edc877c2373968687275050"}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000001c0), 0x4) sendmsg$sock(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000200)=@l2={0x1f, 0x5, @none, 0x4, 0x1}, 0x80, &(0x7f0000000640), 0x10000000000000f8, &(0x7f00000006c0)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}, @mark={{0x14, 0x1, 0x24, 0xffff}}], 0xd8}, 0xc000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000800)={0x401, 0x10, [0x1ff, 0x401, 0x7, 0xfffff496]}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000840)=0x1578, 0x4) r4 = accept4$alg(r2, 0x0, 0x0, 0x80000) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000880)={0x9, r4, 0x5e2d48f669d8598e}) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000a40)={0x1, {&(0x7f00000008c0)=""/99, 0x63, &(0x7f0000000940)=""/198, 0x2, 0x3}}, 0x48) r6 = inotify_init1(0x80400) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000ac0)=0x3) r7 = syz_usb_connect(0x3, 0xb18, &(0x7f0000000b00)={{0x12, 0x1, 0x200, 0x99, 0xd6, 0x92, 0x40, 0x423, 0xa, 0xab16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb06, 0x3, 0x8, 0x2, 0x20, 0x2, [{{0x9, 0x4, 0xcb, 0x3, 0x6, 0xca, 0x90, 0xf4, 0x0, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "51de1132"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x1, 0x3, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x0, 0xa, 0x38, 0x8d, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x7f, 0xe2, 0x2}]}], [{{0x9, 0x5, 0x7, 0x0, 0x200, 0x3, 0x3, 0x1, [@generic={0xcc, 0x24, "cff25ef56e4d45d4f9a1ed80ada95866a9c81208b443b7e6d8a4e90df9c8492d9123870c6097c9dbf9f59f1a007d5369cc8abd67484031baa20ca570a01b5686e840e1e10c3c0d410a1f31ea6118213822c4b8fdc82111ef2310aa4036563fb431a63e6c5946ca1e4510b6f0499664929e8560de5c127a979478bbf44089386a6e81048326a1000ce22b268f1f63a497ca0e832875656a7fee066642703fa8c6b8a35df130f9513ee2b168f9ad83c8cb0f63748f8245473e09385f42a5b39d892c80c8d1e761d645ce84"}]}}, {{0x9, 0x5, 0x8, 0x1f, 0x10, 0x5, 0xc9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x6833}]}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x0, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x800}, @generic={0x14, 0x1, "8bb7ecaee08d4ae644ed41d42d14008e6480"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x400, 0x2, 0x9, 0x2, [@generic={0xa7, 0x21, "93da376703fb448bb935e883e4350651e2c3cfdbba8909c981ae3c214622247c9ed8ad509e260206886ad19be3b7bf26412810f1e261e792d46ffa7fe32bfb46e1d36070ff90dae02b830075e03ea3a76771d1847ee021f51bf2659a696523768f669b1d564928447e3583430b4cfe62220fca18e141ae68bc07c3a22df2ff4c957f0dbb1facc035dc93a975fd61ef48168adb812712b92f66853b05f102722909a3ebac1a"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0x2, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x4}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x6, 0x88, 0x17, [@generic={0xb8, 0x22, "9bfa0d99f01562b5eb39f9641833d282fe1fa75935bcb3862665959d00ff668b9bea1efd984cc7f67b2b7e8267215275367c1eeed4edea40176968a9362318135ee0acb1d456af67a677948c8ceb6719e909f183074500223f73779bb4746bf61919ed2b23cbd42239f8c5a5b654254eeba1fcac534bafdb135b9ae2cb4decc263a819df3d85c1b21a74420065c051cb6d5aca7fe872bcaf9cb14cffcaf989b9f776ce9dd591feb251d7f0e9be4f7335bbeb222abadc"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5}]}}]}}, {{0x9, 0x4, 0x62, 0x2, 0x4, 0x2, 0x6, 0x0, 0x9, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "2dfe832497"}, {0x5, 0x24, 0x0, 0xa6c}, {0xd, 0x24, 0xf, 0x1, 0xfffffffd, 0xe, 0x80, 0x5}, [@country_functional={0xe, 0x24, 0x7, 0x11, 0x7, [0xe, 0x6a, 0x1, 0xffff]}, @mdlm_detail={0x68, 0x24, 0x13, 0x80, "c8714b521e3c51efa1a240d10c324f50f3079969827b484639c2326626481374a74dae1fc2f959a54e57206622ce1de54e7d3c3c2d8406757ac97d774446b0a223b7acd108f6685c1c41438e0275ec12a40334be1c4abfcb1bc123f45ddea5c490acb3ac"}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0xf, 0x8}, @dmm={0x7, 0x24, 0x14, 0x147, 0x6}]}, @uac_control={{0xa, 0x24, 0x1, 0x4, 0x4}, [@selector_unit={0x8, 0x24, 0x5, 0x1, 0x2, "ebf8d6"}, @processing_unit={0xc, 0x24, 0x7, 0x6, 0x6, 0x6, "94335208b4"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x1, 0x5, 0x1, 0xe, 0xab}, @processing_unit={0x8, 0x24, 0x7, 0x2, 0x1, 0x1, "16"}]}], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x8, 0x0, 0xc1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x8}]}}, {{0x9, 0x5, 0x8, 0x4, 0x400, 0x0, 0xf, 0x9, [@generic={0xa4, 0x9, "a0bb0373c88322e7de8463950438f20b0078f11ffe33b3277451e43c08bcbe51756402631426b92ad2fb7449520bcbbc803bf1ab8eb3a507760968d131e4272403ba8f8dea3091e15bb1bb9e73d73289b167b258cb73ed4062ad39e5992f3c73ac07364f2a6b04e0de1c65368d31655fb33b7a7002025a50c16e2f48164008e73d60ee63bbb1744a1e8670903659eaeb8283b6e91f0d65f9ef333d0b571b9053384f"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0xe, 0x2, 0x81, [@generic={0x3f, 0x22, "3a5ec173cd534da055b75dc3a7a03286975db1ba598bfd1a8d778ab5dcfe7845d779628ffa130a0a671b3502050008d173dfa89dbd76527fc213594644"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf8, 0x4}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x0, 0x6d, 0x16, [@generic={0x6c, 0xb, "bd781f3094281fd1f380ac17e2874bdcaf8c9784538cae239f40bd1460e9d68ce626cfa38a3e080185a196c33ef4cc2060b4b590c0b17469c05587f7582e9a0b5ea7eea292ddaf4428a9fa564d189facf628e5fcd7686fb097ab5b21c25ffe522c73157bc58d47e5e80a"}]}}]}}, {{0x9, 0x4, 0x3a, 0x48, 0xc, 0xcb, 0x5a, 0xff, 0x3, [@generic={0x45, 0x3, "4bdac623926bdcd045193e2f779b5bb41cbf56bd3afcc03c251c273cda93df33c10d6d1676ec26c4c06b88aae89ca40e2147030912fd6da569d49d97a143b7a6c063bb"}], [{{0x9, 0x5, 0xb, 0xc, 0x400, 0x25, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x7}, @generic={0x92, 0x10, "fd013457738fc1d56e0de54bb80535309d73ad3b7319303b999ad7828b49b02806df22541ba73a6b33863544f6066bea4f7e06240357b2b35ae6c2a9538290693022c3c9db49ea8470de09a892c314afd5fd0a36a1489a54b8acf9dbdf7e721b5a3b8412158eb9c3206c361e33534b106604853e896905eff41ecea339db2495633a15f1d41449cea6baafdc3683a4f1"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x797, 0x6, 0x3, 0xb, [@generic={0x90, 0x10, "bfb6d3441dc2070a8fb154ed58e1ccee372499dd55f09cf33354d0a6660fb0f2bb70128529b2d938b4686e36bd5b3c4b29c5282e4260245e4818864bb336bc940207ed008955ede1d146a61937375c739893484eb683092f58b5f2b1ccf37f6f932ab3ce91d31e3c43f0141401d16e8e6bc48a89f6fe9880ed7d8431f1a16c7d449c5a12f246c484e82f8db3e820"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x3}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x3, 0x4, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x45, 0x6c3d}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x3, 0x4, 0xc1, [@generic={0xb5, 0x3, "0646fb80ad26a4c12617c8fe482c4831c0e10d71844741c1c3ccb1122e4d82eaeeff55dca548c99d8efd5896db9e1a6925e4c9d1c36fe75844dddb0611fffdf6fb56b66fde475cefdd1dd7549e80441cd59390c25ca67ac7794f47ba92f2da763be654c251aca9acc8ad1f3b552f53c9489779c1a60511872b2e93cbc32005bf0d01c3e630c20b5bb0f87cbf7b5c1e2d264db37ac11a899054fb0401061ebbe45a6e8fd02eed3beeb09f0c706398a52052ea06"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x9}]}}, {{0x9, 0x5, 0xc, 0x1, 0x3ff, 0x4, 0xbd, 0x5, [@generic={0x28, 0xb, "517c0ac51d803168eff09ca3867657d474de4d686ca7cfdffe7fbfab3727ed1afa5e84bc2511"}, @generic={0x2, 0x5}]}}, {{0x9, 0x5, 0xb, 0x3, 0x40, 0x2e, 0x1, 0x6, [@generic={0xd0, 0x21, "477b2663d51bfca3108732e3dd5b88fa472a61f6f7965a04e577ccba9addde28afa58341d172daeafdecf28e40907d09ac6d02986fce48e4f8bdea1433599c077b264233d018c3d1936ac84bfc0ab53102f85040a6138a9d7a2631c21d7a6ca8aa8479f66c47efa8c1a793b305ccf50bc2ad96e44f894de68401b55cf061736ff5b280abf734477fc9427149574f26b15b57d785a69c2a45534eb4bced41604ca656875847a2b9aba90e2ec07560b0508fdc88579d57b9c64d23dfd519010f90bccfca4be88fdaf6e49f8c0550e3"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x8, 0x9, 0x1, [@generic={0x29, 0x21, "990162b8b9d5cb03746565a77a7967aebb4d2a0195bf49bac956ef0e44b51c4f3871146cc36dce"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xfd, 0x4}]}}, {{0x9, 0x5, 0x0, 0x3, 0x8, 0x4, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x5}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0xb, 0x28, 0x5, [@generic={0x47, 0x23, "cf44fb5162ad5cda8434edc717ce1fb6345ebda44eaa2302d011bc18a2e275505dbd1f103859c05875d37ac9e5c15156c54a7085190e69cc8aebf981685a266cd6406b4dba"}]}}, {{0x9, 0x5, 0x88, 0x2, 0x8, 0x1, 0x1, 0x7, [@generic={0x5b, 0x3, "12f65a6a7fc5ad942899475a7c0be6dba89f138a87aeceee9ab350053d3b147913d27ad90842ce1585faca5feec4ed483ef2e4f69f1ee695f0d3388ac79dc913ec6059756df5954806e5aaa5069d751839f9eca3bd49c69b1b"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0xe, 0x9, 0xfc, [@generic={0xf4, 0x24, "cdc4073dbc544cd57c4f86d6be529c037811e00a1b41060693af552ac4da0151b54845e7f77b3811f755a77cc77d03074aa31de310c2eb06431b6def59230317cb45530b213bd2f989031c4c35e22dc9e72469de1f98bb736b3e92ba842170c8f9630671cf7fa16efd943f302ba176af2d3b1873b9579a0bbd51f1e0027d2cd6331181ea7920e7f294cfc625b66754878b0d38d35fcdeeb9c3404b9e9c77af54cb84e8311048fd6e14de2c65a9d2044068a4bd655bb6a0d3e13f549cb074e9e90a5639df05400578cf3a8b5b0b2c3f4f115cd4b9e9bcbac450aa0d58672b17733163de1d7eeed9d8ef22827def3a96be4a8e"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x20, 0x9, 0x0, 0x4, [@generic={0x5e, 0x24, "9e64fed6bf10d2372992099029b882921e1f5095198dbeb8c4e22473b13d5a8d6bbe71c79248fd41ec0cce621eed75fe5ab0a55a1c8e9ed0748aac3f29f4aed971fa68cf45c2c6a74b393fe7af97652e74cd4c91ff6550ed43445825"}]}}]}}]}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x74, &(0x7f0000001900)={[{0x2, 0x4e00, "d00c"}, {0x68, 0x4e00, "e43510b3796456017bcbd7cea55ec4feb8c0767a4949d438f0ce4e6451b2f4bcd45f4ad3da7aaa0c62f43464e0f5ddfed551d9f03070ba04c0e2048c03915abb2b485befc807ec2699a6c04e3ba2dc9934dd9bb5e0a8a9220897b8aaab3cbfa5587ab5d4d4e5a610"}]}) syz_usb_ep_write(r7, 0x0, 0xf8, &(0x7f0000000400)="57d71c209a913d829982a97382210946d2edd0d99d379e9c8de1588b49a076b75919938e4a6732a9d6cec0afa8cabbdf83e4c833d3d409eb7c21b76114d7b590ed9b7b15a857efafac10aa176c48598e608b21587111b6cc6cfb04b86214d230f15b3ec6fb9d89d49c43bd47338f9b1053a33fa8c7886a5d9eb2e7d07bba94f8f9061a5dad68e497920660a65d590c5c99ab653382782654c4ea285987b695362cac85b50755c14aebfd46a73573c2a863cbeacce9b98f318bab04b9455f624bc3118e15283901c85f7cd1b705ea04ba0baedd8ffff0453025a2c063b3ea21cf7f6f7de22354a3e81411c873ed06c064b8adb0a9aadbe098") r8 = open_tree(r5, &(0x7f0000001b80)='./file0\x00', 0x1002) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001c00)=@generic={&(0x7f0000001bc0)='./file0\x00'}, 0x18) ioctl$sock_inet_SIOCGIFNETMASK(r8, 0x891b, &(0x7f0000000280)={'ip6gre0\x00', {0x2, 0x0, @initdev}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r8, 0x8982, &(0x7f0000001c80)) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$tipc(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x69d2a589ad4bae00}, 0x4008080) socket$isdn(0x22, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x7, 0x7, 0x1c4d, 0x3, {{0x5, 0x4, 0x3, 0x38, 0x14, 0xc, 0x0, 0xf, 0x2f, 0x0, @local, @local}}}}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) syz_open_dev$vbi(&(0x7f00000003c0), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) write$tun(0xffffffffffffffff, 0x0, 0x32) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x20200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r2, &(0x7f0000000300)="ca", 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r4, 0x800}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x7}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x1}}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x1, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffc00, 0x10000, 0x4, 0x3, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x29, 0xbc, 0xc0, 0x1, 0x10, @private1, @empty, 0x80, 0x1, 0x1, 0xc5d3}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f0000000440)=""/71, 0x47, 0x0, &(0x7f00000004c0)=""/18, 0x12}}, 0x10) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023892) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\t\x00'/17, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="01000000010000000000000000"], 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xc, &(0x7f0000000240)=@raw=[@cb_func={0x18, 0x5, 0x4, 0x0, 0x2}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000000}, @map_val={0x18, 0x9, 0x2, 0x0, r1}], &(0x7f00000002c0)='syzkaller\x00', 0xb70, 0x25, &(0x7f0000000300)=""/37, 0x41000, 0x60, '\x00', r4, @sk_reuseport=0x27, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x6, &(0x7f0000000600)=[r8, r9], &(0x7f0000000640)=[{0x1, 0x1, 0x9, 0xc}, {0x3, 0x5, 0xf, 0xb}, {0x2, 0x4, 0x2, 0x5}, {0x0, 0x4, 0x9, 0x2}, {0x4, 0x1, 0xa, 0x4}, {0x0, 0x5, 0x6, 0xa}], 0x10, 0xfffffffc}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendto$inet6(r8, &(0x7f0000000780), 0x0, 0x4010, &(0x7f00000007c0)={0xa, 0x4e22, 0x8, @empty}, 0x1c) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0xffffffff, 0x4a0483) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x91) (async, rerun: 64) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000180)=0x3ff) (rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000200)={0x8, 0x38, '\x00', 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) sync_file_range(r2, 0x8, 0x9, 0x2) (async) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000340)={0x1, 0x2703c938, 0xa5, &(0x7f0000000280)=""/165}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000640)={'sit0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x20, 0x7, 0x9, 0x2, {{0x13, 0x4, 0x2, 0x26, 0x4c, 0x65, 0x0, 0xd, 0x4, 0x0, @private=0xa010101, @multicast2, {[@cipso={0x86, 0x37, 0x0, [{0x1, 0x3, "cf"}, {0x1, 0xb, "aab85f7d6a5193725f"}, {0x1, 0x8, "3ba0145dcdda"}, {0x2, 0xa, "2a357f0207709bc3"}, {0x5, 0xa, "9bfb933fac0e731b"}, {0x2, 0x7, "07e6c42f1d"}]}]}}}}}) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r0, 0xffffffffffffffff}, 0x4) (rerun: 64) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x1d, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x1}, @ldst={0x2, 0x1, 0x3, 0x5, 0x1, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x2, 0x9e, &(0x7f0000000500)=""/158, 0x40f00, 0x20, '\x00', r5, 0x0, r0, 0x8, &(0x7f0000000680)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x6, 0x14e9, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000740)=[r0, r0, 0x1, r0, r0, r0, 0xffffffffffffffff, r6], &(0x7f0000000780)=[{0x2, 0x2, 0x6, 0x8}], 0x10, 0xfffffffb}, 0x94) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000880)={0x8, 0x3, 0xf, 0x18, 0x3, "b4714f940cd4fbb244bb97e77e26b6d5268899", 0xe, 0x4}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) (async) r8 = getpid() (async) recvmsg$can_j1939(r4, &(0x7f0000000a00)={&(0x7f00000008c0)=@rc, 0x80, &(0x7f0000000980)=[{&(0x7f0000000940)=""/16, 0x10}], 0x1, &(0x7f00000009c0)=""/43, 0x2b}, 0x40010100) (async) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000a40)=0x5) (async) pwrite64(r6, &(0x7f0000000a80)="a291d01ccfd29d2f1573a0db34f213ada9e203e58b67532cd936962a9fa22bb5066ae7bdbf6337f453dc4f60e79dc8917ea75f484acb7f2c543b300bb11617c169d135ab442e336ae3fd98312897a26be032b2d33e6fc2468607a6df9a8f1664c2e2d5c6389fc83feb1f060f5b36d37a1d808267c9d7fceaadc19670b407271c4d54bf2aeb0bfc90319fc71aa83a74eb309668f3e9d9ddc430aed2f0e5f54c07342c400b23e88d412c28cc2b78133be16b1bfd3f0fa4b4b8726fb36ddb868bf267a55023fadd2b7bad1f65f4579fac4c6e5aed2db3747d", 0xd7, 0x0) clock_gettime(0x0, &(0x7f0000000bc0)={0x0, 0x0}) futimesat(r0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000c00)={{r9, r10/1000+60000}, {0x77359400}}) (async) kcmp$KCMP_EPOLL_TFD(r8, r8, 0x7, r4, &(0x7f0000000c40)={r0, r4, 0x3}) getsockopt$PNPIPE_HANDLE(r7, 0x113, 0x3, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) (async) sendto$rose(r4, &(0x7f0000000d00)="ec589e6a9a558df8824580f3902814e96f88fb195a5887b9af53bb51c81b3c", 0x1f, 0x4040080, &(0x7f0000000d40)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000300, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000d80)='./file0\x00', 0x1, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r11, &(0x7f0000000dc0)={0x3000001d}) (async) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000e00)=""/159) executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x40800, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYRES16=r1, @ANYBLOB="b478d9f9c1d310d9c674ae8af84fdb42290f3347e6f1ce1b6a69dd57b62fa010c6af3f8c9fe8bd93a0d5f162d5eb9dbc026585a2a71ad3cca81281cdab93cace9605e50d809cfc0880924cdfb76b019a2871b765ecd8c2e74c224762434fe8c9b3abd4636dfea0e9f9c91c5a702a7c8af16e4dd47cf1ca3653638ff3cbb204f4c1b1568d253972da35154aded92121fcf1656e31f9f326c42bd2512bc6a104ac5c5ff4402882b631ace08a9445b62fec2c1b2477ec5ba48c3ea2567e8be3f225d71b3f1cdf9b454bca36643d424ff1f51c2d77240e90f489b827dd7b9876195335a6bb285f37be3fe4d5a9beddc1b4db4af898eede74e7e12d0669f5637bb7e2c953158cdd7fa9d065327a466257fbf7569decd682d977eef6ec08f6ea6ae0ca2346f7476d1ad16e47c0ec2ae81b0beccaab46b8191f0e2784fc735817aa6cd308f8930a31a13a8c431d737a956664bc2028da5401847173656ce03e4f4c505221a106990479c2f92d43f97c755e5233475ebbcbc63f879dddad3e0ac246c89fe9d921c7ffd06a3ae332e2a1738b82135f75be4706a461bf7d7c89986e598c8a60e9a4687627ed1d04f66e5301f7d0448e4f8e2fa121e8dc25b6eede41e789dc92ab403f9a855d0dd28d46e1ae0867743217955e9687d5af0f306ba3325d913388ba47a17138a89c5704e73943c5eb1688f1de933f814d45b974bdd18a95c9a7c66df2cfbcd5e7b62f432079baa21867f250f43e70d86df989ac08927c02441aa4a9f698af40f20c66905084ea0fbabcccddd8bb5ce907aeeb8a52567120a4b58a161568456a447ef6a0e0da87ff3600407fc004df6714b00c354efffaa3441935f9219c28115e38e814f7d98d2b8e796154e8ec8bd2952d620b9bafab166e19e286ea5ab384d32872ce0f13f55f03ca056f7cc9e2d29d124d64008d343e59181844833ee403ade252a462ae66402373c95c410370f3b4fc174f9040390e3a404b58b2a2eac183ef63b3fc2d410be2a642105f09be727a4be080bc3164bbb17062801193b2fd282689a4bb9708620bc55a0e45c4535a8398f6ec409597fdd36ea830aeda477248757c310616f5b2fa2544090287b982f5c3ebe5df2b6161265985c2ab5dacc8ef82326dd3d9b5243730edea4be26ef760481bce0529a3c9ab34440be9fb0362ef63880537f21b29ec8494482f1725fceeae2304f4dd2d4c7184609643553ee2ff53550b9d84893879e3877bb057f69a9ab622d0a475a0ff5425f00be2436ef6b2bf589b56065c41dded4f3583cab60339c4293f037ac1ac5725e62726be62330bc39879ad6a1c5fe030c0df95f499fa7941f29984c25677134f3207ab8d54c2145602b1530a03323c7d39c8cd10f41d08e1ab2e7a3cb5dfe890e54cd3a5d25e5c536da77f8c9c9f9ee45303f49c16c55c9ee4d1ab60f9c8df874ef27d9e51deba6c3c5f626783b401c9ddfc31a6aa8c019704abd228ffd2d8b014234be9109614a1032a7f64896e33b49f6670b4c420fa071890035bae6534689b901ca874a1801b8fbd3f3dd13f21b01b7d4eafe71aeae1421b45b84060e2614165d2c5e1cdc35ca0f2c1c9c5e37bb5a5da50e66da5d45048937b75f183c126ec19f8b39b103f43adbb7fe467ac66e47675f5f1fd2ac38f9814f83f0e0b2c6840a5a6a46f6c8d4fda92846ebe40a2f805c0ae26f462738b839c59157fcd6b167ec0da3938b22f73628fc196218e6027460b95d71ccd24683fee3c269f30954718e874e37e0d008fcb06e2ff0fde51b7a0f84233a89c63cbd03689522aafec03e5e13833f52edea12222b5af0ddb1aa9e390f6ee9105dad2bccd9f9c76bdf44d228f9e1c672e7c644b00d91433e1781ac1732c0a5c8ae1f421bf5ce3203adf9635b0fa23b2ed4684abd3280cbeb92a8e77e1547002f73a7707d052d63aa5aecae0ca5896212f8f671249323a6b3b8627000000000000000041801e222aeb3c01775037fcae5d2806bd1c6c319a29b3ae1037fc67aafb595a11b2e422ae12e1aaef5f71f854ed8d4b95cf061368fa8fc0b06fbccca15e1ab054ce6fb1ba30c5028e4915ed08f4b5c8962021e34df8b0f2922f17d0d4d26952440704619675b45132294f03cece8d7c0495f599677d1ee47d9cb32ae6b7d229cfcf80a4ab670337dec7b7a466b460fb457da1a6b10bdfade37bd6d12d6f70d13aa6e50b26202b4cb18f1e4ab1a65cdd8410d7a2ceb23b2d16efa0933a700f2893c53c8ef31c725d679419fe68b8de4e9ca14cf883bf1f3299294c10e90e8b2b55563421d49d417981f57fa54fbd6476d76a38d58b3c6f8cc61170032322c79313e571310d43ec9a4ab52dfd225c7893d9c1e4a7905e9fdc68e805fb1da9644097c1771b96cf924f3f2ddf70082b17e81851f0b662d0667d299629325722cecf67da8847744b5cd02683359e9964babba31598349536e56adcde2f8292dd44fe5c129613660f1f9c0c8ae2b2e11316160dc3eb6b0efc592ac6271a4c2d91060090fcd504a494e55f89234122977307adbb533e3fe44d5f08f78dedab06d940e3989e9320731d215d6dbdb40e845de3d360fc3c069a8747715846663a18d50e9bccc13677d363fa54168ad31fa13b00db2e75c54c6c45d31256a9c7c29bcc83ae8426f376a76fc20414d25c423fc7b0ad4d0a0641fdee46240978e311ab299020447606af937f8a911b642ed8319f861394ecfaa513865ead0e76bf89880351995235a505e26ff4d58c620cb7e9642d0f14bfcd35d5c15e0930949ee26842a31eb96b272a5b109aa2c780d42f88a2a6e1199a14f482fa72c61413107d752913fc3bc137c320d2385dba14dbdde0bbe3021ac843313d1abd30d308f18dae3a6d28c8f1e69a7eefa6498937206e39bbddf3f5970f3eff345596cf46f0e380b2245b7c2b05f96fa950ed510d7af5a0bca2d704b981e0182310b38d848d88e1eeaf27da645ed27c4ed87a9ba7493409a0521231c15b9ef4f24877f0c9b5cef64a951044c58a70b3707cb2d90e4d2e77fcc7c82c25cca581871da57feaa48ab1af99eb5433162d62283bf7b327c295b7080715301c19d561ceada081bbf7684940c719d9d07aeec185e4c542277528416652ee3b9e2e28c402a28efed972f5c6758f836648e0a1d3163bdfffb03aeda0ccb97a89f140b367ca9c60b43883f7524f36b9c68acb22386e95bc7c411032daedbcecbe2069c821c0aea045c010f88644fb7bc391e4da00cf69fd5db379fab9c523857ab8a7496a41ecce87979033ad088b45cd7ede848a5b057b1a04e489473b6dc770145f9b3054132dcc81900dd3e5bafee99acce8f038bf1d3e70366f9bf804bdebc6d06cced6789ea1b5f477c667cce30f06c60032da51d19b32ec4c2ede212023e9eefebe1379743fc6b95307b7df5f67bf463fc2a3e58a6334f928e89582fae79139b0b4aa9a943e1a62db6bc6a3d3d66793ed395c22c32a55da99a3491bf68f9e1de73394983b6f0aea11f4c515d7142e15d6988706b6605b1bb1bd7622dd8e6d8add901a3b4457e3c2e51730edfef190a1d432f15cb8c5e311b597d962caa5c02fdfa8961ca3333ccb99362b870f2263254b3716953b025177f95cb454103a90c7b99b5ed99a91fb95e13d5ce4dcf0a2e3035a05e4b44e5cc718d654e9a4dfe272617efd21198e2a8159b35a38a988a8d77f6d68b1ce41a75e70c8b6e7d4c72dcb0a02ad68932630fde5a90921cdafd2604f5c751f02d6c2242e32a35ac27b1f45c534877020188b156dff52399d4b28e25da70e01ca82b9bc5a10aa8ee419e8a05e63d357720ef0bcda1698bc5c5e4563b5fe8c24353c874f6c82bdd9d495320588df81d4138cdf0fb10c0818c6a4a90ed058b0467149bc38610dbc8e42fde1d4975db52d86a105e6cd6057617710a49aed06cb12ee6c1a7879ed1e461d1a0a6502a2df92dd74bd4c5af55ff33b9b20aff1648d5c5ecba9640d008819c2ad508bea4edaa4941475473d6eec37bb581a329bd0d63ed84acbe936adf7d66ece31554bcdf66699ecd25419680c0daf2fab04abd013ba9e5b9f5c5c476f46f6caf270f9401c09f78e52a0e5b4c431aa66ab07ccd96babc6469f2bb6abcd8f9b86561bcb914944a79966f6d236bde927405aa3cf2039038a25fc155da96c19aab2abc412b2bb3cce4c12c68f3fcaa8777ee6d0909723f095e2455f58d31b55a8222fb2328b772bc6ea30ff15d34ea1e8db5b32376230526f45782c3e902e293baf93a7cce4d125853802103f18ed1cf5024321973a433f90ba9a2ecf62e351480849544e97a05f5009cff6e34091f21d84aef79e5fc4a3bc334f56f0a3115582dab808e286fcc8cb68b5bb59d216602ef1a0272371549005f02f2605b391c9c528e3f8c2b50b1b95bb0cb100679bf6c7fe6f05873d2aaf2b7cfd87ecf3cbd7b3705f8aad42ecb7edda26389387ce7e6959f03da810d5570b49054bfd9908d46c3b2e65a32bb3053cc2dc8168128faa803d6a5a75d075fd9204617ecc262062c809b3bb22cc425392b4a656c8b7e116a2528a2b327b648a7e75aa828e46269f70a54af0d33effb616c6e02b0961f4e9047a837f0fa8ab7902890f5e31b92e101c08202066bfd3516afb5be52b90c9cb756492f04fdbe69ca73ff55d20eaa7d135dea3a2846a92b64e81767445671f3fb08e6cff53dbbcd59bd8583c78a11965874f8a36d71f33d72f9c420163f8bbd8fa2ce8896092cd6e1188a116c91560585d0fc55a84d99eda310ad6fd875c1409d96ac2d0ff8dc7fa88b034869f1eadb810d26472a867cf0824e9c8577d4be60772d42050ef3a9e4b82973f34391ca1912cb9e5da8b82b4696b819143bae9d1c32d876dc9357a698c5007ab122f60e9fe79b292b6286c370eea65587be7d934d091740e5e8b3686e0ae3211029e38fed8e094c3836b4e845b19d01690375278d1051cac17ca3feac6fcb6f197d6d6f08f6f5b964f1058ec5313687fe295efa2565176abef41a0c25d766711b88e98aa737e2028a4a20a18b4e8b905859cea931e501caf3439a75a289994e0ce4760bdc862e0419f8bcb0683c0ccd76e10c7420240e381c1990872a21da8c980919122f7888dd3b56d32b752a61498e12fb631565aa0305c95c8192e94cc38a5606bad5d1123be10689fed180358a617c63010ca3dbeca02d26c0a8c3b7340b8fb8fa169e12bdc02d6ec026ab4375399064f7cd082efe0094ce013ba599ba896f64cb396ec10802f7e4096ff485db8ab79ca56b1fce8b81af3521c638be8ed456eb2a53640f0febca078ed74bbd56ba48a6cb76732d0d26c9340a590a51f1c13294026e40c338150427e452688d83759aa668071ccdab50b2086567f5774e74b08b5516b600532cdbc83f355121dbed97070af4dc6084b5a1f0795962a933c93cbc28a03c49b0c8272395e71ee79bfea303c49c142e55f50473645080ccf2b09283ed75f0a6104e8816d59dd9e798ef4115a5d975b1a7e229053ce5f929c71b8cbd6886734fd42b5c6277e68af0b417d0d80ab5eec7d2212ec247589f15c941eb8e0969819c8f5a12205443a297e75a3b1b7689b95c9b43d95a35a14f2554e1cae67a7d9df474a65e2eabb45c5309930f30b558d00aee07fbd463a1faf7ce357ca27836784605b6081c35a404c533f6b9055b923bc6141edf63fc36f0cfb09a4c02cfde42117ab5eef48a911113662d6fdfb04546c7afcb6cbab0a952e33eb66ba9364f9235f90dd78579441e5b0f0ce243d85e3df6e63be034364a287"], 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207d9af8ff00000000cd9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000000000000b70000000000000095000000000000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000001010101000000000000000002001c002000018006000340000000001400018008c301007f000001080002007f0000010c", @ANYRES64=0x0], 0x40}}, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x122}}, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000100)={0xfa, &(0x7f0000000000)=""/250}) mknod$loop(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x8000, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r4}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000300), &(0x7f0000000480), 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800100010062617461647600000400028008000a00", @ANYRES32=r8, @ANYBLOB='\b\x00.\x00\x00\x00\x00\x00'], 0x44}}, 0x40) executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000070000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf09000000000000e5090100000000009500000000000000bf080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) executing program 2: r0 = socket(0x11, 0x3, 0x8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x5, 0x3, 0x3d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) pipe(&(0x7f0000000140)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x0) bind$inet6(r8, 0x0, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x22004001, 0x0, 0x0) sendto$inet6(r8, &(0x7f0000000080)='D', 0x1, 0x404c814, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, 0x0, 0x880) r11 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r11, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r11, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8000002, 0x9, 0x8, 0xb}}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYRES32=r7, @ANYRES8=r2, @ANYRESOCT=r3, @ANYRES64=0x0], 0x20) executing program 0: r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000000)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$sg(0x0, 0x401, 0x20000) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x94, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) (async) r6 = accept$alg(r5, 0x0, 0x0) r7 = accept(r6, 0x0, 0x0) sendmsg(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000240)='|', 0x1}, {&(0x7f0000000780)="1e08a3f6", 0x4}], 0x2}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vxcan1\x00', 0x7101}) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x20, 0x0, 0x155}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r5, 0x47fa, 0x0, 0x0, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000002c0)={'das1800\x00', [0x0, 0x8, 0x2, 0x8, 0xffff2f1c, 0x7, 0xf1, 0x7ff, 0xff, 0xfffffffe, 0x401, 0x7fff, 0x1, 0x5, 0x10000, 0x2, 0x8, 0x1, 0x0, 0x6, 0x0, 0x6, 0x8000, 0x1, 0xffffffff, 0x7fff, 0x9, 0x3, 0x4, 0x6, 0x4, 0x7]}) (async) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000002000)=""/102400, 0x19000) (async) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0x1, 0xff, 0x2, 0x1, 0x8, 0x2, 0x6, 0x5, 0x1, 0x9, 0x43, 0x51, 0x89, 0x809, 0xf27, 0x6, 0x8008, 0x8, 0x5, 0x4, 0x8, 0x10000, 0xfffffff4]}) (async) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0xfffffffffffffffd}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x3}]}, 0xb0}}, 0x0) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32, @ANYBLOB="8700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x400}, 0x94) executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000240)=0x63, 0x2) capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x6, 0x10087, 0x0, 0x40}) syz_clone3(&(0x7f0000000180)={0x8010000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f00000000c0), {0x31}, &(0x7f0000000100)=""/10, 0xa, &(0x7f0000000380)=""/4096, &(0x7f0000000140)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) syz_open_procfs(r1, &(0x7f0000000200)='oom_score\x00') executing program 4: r0 = socket(0x2, 0x80805, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x2040403) keyctl$get_security(0x11, r1, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r2 = syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1103, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x5, 0x5, 0x200d}}}, 0x7) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904030000ff4f9b000904b000"], 0x0) io_uring_enter(r2, 0x6efc, 0x3900, 0xb, 0x0, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1, &(0x7f0000000600)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x3}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x0, 0x4, 0x2e}}], 0x38, 0x800}], 0x1, 0x4008080) executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe4, 0x68, 0xce, 0x8, 0x2013, 0x1faa, 0xcaf7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x11, 0x0, 0x0, 0x8b, 0x87, 0x62}}]}}]}}, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000000000850000003100000095"], &(0x7f00000000c0)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async, rerun: 64) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000001e00431b0000000000000000070000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYRES32=0x0], 0x28}}, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x448240, 0x1ff) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40094}, 0x20000804) (async) write$binfmt_elf64(r6, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x87fff, 0x3, 0x3e, 0xffffffec, 0x398, 0x40, 0xd6, 0x0, 0x5, 0x38, 0x4, 0x0, 0x2}, [{0x60000000, 0xf, 0xfffffffffffffffd, 0x9, 0x0, 0x8, 0x7fff, 0x512}, {0x6474e551, 0x7, 0xfffffffffffffffc, 0x6, 0x8, 0x7, 0xfffffffffffffff7, 0xfffffffffffffff8}, {0x3, 0x81, 0x7, 0x5, 0x101, 0x0, 0x7c, 0x3}, {0x70000000, 0xfffff994, 0x4, 0x7, 0x676, 0x9, 0x4, 0x5}]}, 0x120) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000040)={0x2, 0x6e27, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x20, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4090}, 0x4000c00) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x6e27, @multicast1}, 0x10) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x20, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4090}, 0x4000c00) (async) executing program 1: r0 = socket(0x1e, 0x4, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000040)=0x4, 0x4) r2 = socket(0x1e, 0x4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0xa}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x7, 0x428180) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000480)=""/4096) r5 = dup3(r2, r0, 0x0) write$P9_RLERRORu(r5, &(0x7f00000000c0)={0xd, 0x7, 0x2, {{}, 0xb}}, 0xd) recvmmsg$unix(r5, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004100)=""/4099, 0x1003}], 0x1}}], 0x1, 0x18cb02a0, 0x0) executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x2, r3}) r4 = eventfd(0xffffffff) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000240)={0x2, r4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000ffff23bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14000400011a04001c00128009000100626f6e64000000000c0002800800aba772bd0000"], 0x3c}, 0x1, 0x0, 0x0, 0xc0814}, 0x20040040) r9 = fsmount(r7, 0x0, 0x80) fchdir(r9) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r10 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r10, 0x3518, 0xaddf, 0x2, 0x0, 0x0) memfd_create(&(0x7f0000000100)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000380), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$cgroup2(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB='pids_localevents']) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000280)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0/../file0\x00'}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000005800)={0x0, 0x0, &(0x7f00000057c0)={&(0x7f0000000180)={0x20, 0x7, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x804) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000240)={@random="a5050f0014b5", @random="0000009000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @local, @local, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {}]}]}}}}}}}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000000)=[{r5, 0x1100}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000000340)='./file0/../file0\x00', 0x3) r6 = syz_open_procfs(0x0, &(0x7f0000000a40)='timers\x00') close_range(r6, 0xffffffffffffffff, 0x0) executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x3f7, 0x8, 0x70bd29, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4010) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000080)=0x10000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00006a0000/0x3000)=nil, 0x400000, 0x0, 0x2}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x3, 0x0, 0x80000001, 0x40009}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000004c0)="8ea0f86434bd48f1f914bc64ebea", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$join(0x1, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x24e, 0x101000) syz_open_procfs(0x0, 0x0) executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=@updsa={0x1c4, 0x1a, 0x1, 0x70bd27, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e24, 0x2, 0x4e23, 0x7, 0x2, 0x20, 0x20, 0x32, 0x0, r2}, {@in=@multicast1, 0x4d6, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x12, 0x32, 0x3, 0x81, 0x8, 0x2, 0x81, 0xffffffff}, {0xaa9, 0x101, 0xe, 0x8}, {0xd, 0x10001, 0x5}, 0x70bd2a, 0x34ff, 0xa, 0x3, 0x4}, [@replay_val={0x10, 0xa, {0x70bd2a, 0x70bd2d, 0x2a}}, @etimer_thresh={0x8, 0xc, 0x80000001}, @algo_crypt={0x8d, 0x2, {{'ecb(cast5)\x00'}, 0x228, "255430105f50bc302bf5462c090692799169745909563f5d559980353204f41ac8fd903f0b23201f8a8259cece2fa33e8fad7a70b88a3b58f173952c9474d1909937a1f305"}}, @srcaddr={0x14, 0xd, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}, @replay_val={0x10, 0xa, {0x70bd2a, 0x70bd2c, 0x76}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x1}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x8084}, 0x51) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000340)={0xf0f03f, 0x6e}) executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) r5 = geteuid() (async, rerun: 64) getresuid(&(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000080)=0x0) setresuid(0x0, r6, 0xffffffffffffffff) r7 = getgid() (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file0\x00'}) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x0, 0xffffffffffffffff}}, './file0\x00'}) (async, rerun: 32) r12 = getpid() (rerun: 32) sendmmsg$unix(r3, &(0x7f0000000e80)=[{{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000280)=[{&(0x7f00000003c0)="6766ff2c8dfacd885d60c2a1efa99fa3e50e215c511f8b2e949f1b53a862322938f14071b240bbfe640301456cc12345b37176c95f4e7cafa863c50076b224bf602bd2a571a07c0bd14e318fc13edfa3949984f8de0e33d149faecedd114f79857f1c91fb9e5a6e4f4810142fa7f", 0x6e}, {&(0x7f0000000440)="682c745fa745c2a0dd3e86c317d549fcefca3bda9ff6e63177d2e62ede63fdf1ffcd711205baaca6bb68bf97fd4865055e7d20d02dd9d1294294145e0f80e98f68756d21835ed8136e0ff9017c27c0ed1b524157523f28441bc811bbbc406202b2addd6d2ab7aa50521b763c5e4ec09a015a558e973848fcff93cf28bc87927c571966731ab90fd445939f6a4d4e759a82c2bfe71219be56e8d3eec61fca232cd58244251ac03ee81d2244c3362bef8e57845f8c5a8af0fb3dc3c9a76bd9fa5d05cf35416f59d0b7cb56970692ac22571efa61fc061b08038ce14f9c84908364a6ee6f3c25e664181d5f", 0xea}, {&(0x7f0000000540)="ba092b8f8c08860b93f8f8034056f992ca5eec5073f52af8a6645a702b38dc9c0d9a387211c4123c1caa8ec250e94cc842e8fe81d6f750d03e54161086bb5a08deeaa51f4ab6463eb23fa4963302ebf36cbbd8b1a5047e90ab056e99f981763360f8da98c2b1f1c6da51b860a82238da7e672fbf6037a3c88e474d9d09737841ca0c36f42a6363fb775cb1d0aa78d4a8f67305508802c046c8a15e7ac81c98026461863fb1e98333f614ca45ce76b8cce4ade02241a2941a2b48fdeb0599a7de725e85e5cf20384d8759ae62b3ec23752c37b79350d3a50671b650d24c2d34", 0xdf}, {&(0x7f0000000640)="b6f1417b95053d3e7c1779ab451d31f9615005b5901bf1265cb3d84466a5f2f7ea63d27b6a09ad44c5dbbe4fd522839f174cecdd27123927981456e9b92bbb034f2cc12636e6f60b685cb697f900e1c10caf3c70128fecc50e53c3c79b7187a313d0264897ccdc0fa347a047fa3aab7283291728c57a0ffc3990840417e38cc4ada2d15fea25749f8770dcf300d7fd4a60070d2259", 0x95}], 0x4, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {r2, r5}}}, @cred={{0x1c, 0x1, 0x2, {r2, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r2, r9, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0xc0, 0x400100c}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000b40)="5386592b0cca54a66ababa1fb2f728392f16ef2decc4e7b548d4fc8d239005cc7f7fa0b01d3eab97554c026e964c4855ca19eb526c38bd9d3964efbab77c679f3b5469738c5a7044b7a69fcc5502bca23d0bee5d727f7a519dde3f5062fbf4c47fef4f88d49e3fc583c24acc7a554138dfccba799e97482c9110dfc4cd09513ed373509750803810b8b481a269ca4be26cb1d0507fccd527868f85bcf4daed3dcc35ba669426390cc7a4535ecf049303f8d2e160ec4e01fd7a5fc76f72c4970b8af099522616be47dfb8d7c4ee6a697a656cf9b1bd47bf073ac78f72272df1dc520bd862df080155407b95cc64", 0xed}, {&(0x7f0000000c40)="2b6d0f7932dbc350dee50f57caa50e82a28f505a3ce591d5640ae0e8422086a5507fbc56d2573598ecb4c923bf60bf791a60690dda377ee4ec77052053540ae03c06ab095c5856665fcf07ecb3", 0x4d}, {&(0x7f0000000cc0)="a6ba62787e9cfb0a36d60d1abfa5f27a02cff6e72953c72c330f9bf3528d539f56fa858026dd0dc22424d6bc5e655ef861be653d", 0x34}], 0x3, &(0x7f0000000d40)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r11}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r8, r1, r8, r0]}}, @rights={{0x20, 0x1, 0x1, [r3, r10, r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108, 0x4c041}}], 0x2, 0x905) (async, rerun: 64) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = socket$unix(0x1, 0x2, 0x0) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r16 = userfaultfd(0x801) ioctl$UFFDIO_API(r16, 0xc018aa3f, &(0x7f00000001c0)) (async) ioctl$UFFDIO_REGISTER(r16, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async, rerun: 64) ioctl$UFFDIO_COPY(r16, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) (async, rerun: 64) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) mlock(&(0x7f000019e000/0xc00000)=nil, 0xc00000) (async) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r15, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r17}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10) fsopen(0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c01000017000100000000000000000000000000000000000000ffffac1e00010000000000000100e0000002000000000000000000000000fe800000000000000000000000000000fe8000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000ffffff7f00000000000000000000000000000000000000000a"], 0x16c}}, 0x0) executing program 3: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@random="0f539af21094", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x1, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc}}]}]}}}}}}}, 0x0) fcntl$setlease(r0, 0x400, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000008000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x1}, 0x94) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x82083) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x4, 0x0, 0xe, 0xa, 0x0, 0x0, 0xfffffffe, [@sadb_address={0x3, 0x6, 0xff, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010102}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x4, 0xf}, @sadb_address={0x3, 0x5, 0x33, 0x0, 0x0, @in={0x2, 0x0, @private=0xa010100}}]}, 0x50}, 0x1, 0x7}, 0x4000000) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x8080) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x555f, 'syz0\x00', 0x7}, 0x3, 0x20, 0x5, 0x0, 0x2, 0x400, 'syz1\x00', &(0x7f0000000700)=[':#,\x00', '\\\x00'], 0x6}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x6, 0x2400) ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0) executing program 1: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff030000000000000100000001"], 0x428}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000000, 0x7, &(0x7f0000006680)) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085006d28b5a4bba683bb0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000340)={@val={0x0, 0x6005}, @void, @eth={@empty, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x88a8, 0x0, 0x0, 0xfff}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x26, 0x14, 0x66, 0x0, 0x9, 0x32, 0x0, @private=0xa010101, @rand_addr=0x64010102}}}}}}, 0x2e) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff030000000000000100000001"], 0x428}}, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000000, 0x7, &(0x7f0000006680)) (async) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) modify_ldt$write2(0x11, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) (async) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085006d28b5a4bba683bb0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa3) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r3) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r2, &(0x7f0000000340)={@val={0x0, 0x6005}, @void, @eth={@empty, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x88a8, 0x0, 0x0, 0xfff}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x26, 0x14, 0x66, 0x0, 0x9, 0x32, 0x0, @private=0xa010101, @rand_addr=0x64010102}}}}}}, 0x2e) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) (async) executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x3, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x40, 0x8, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4000000000000000, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x8001, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0x3, 0x1, 0x4000, 0xfffffffffffffffe, 0x0, 0x0, 0x2]}) r1 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000e40)=ANY=[@ANYBLOB="2c00000076ae9bd8af9b9b92b73024b52ff1c75b389bb4af4070e0383c8e9c5bc544856e6f0758761cfc42ef97d04df5a94736a769a7baa0640765fefeac82645b635ff74e58a0534cc87412477cb01b70427dcc7cec9c0e43ba92c5fa75e6da32a4325163b629f62c1f9ee128e216839c4ad286b33284d791e82e5948cfe5acbed9ef1204d26aff86e4dc8db919dee50f258e82c70fe8e224a466e29a601a1ad1262aa935aa187004ee4c564db855673f850ba649f8de8e3fdb753b383887", @ANYRES16=r3, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYRES32=r4, @ANYBLOB="0500330001000000"], 0x2c}}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r7 = fsmount(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000300)="3e03bf40e733ef93012f997edf26de", 0xf}, {&(0x7f0000000a40)="19a58c380094d99c17c0d2e2d01f00cee989b9687810301d82c9c946831a0c1bb139974c7a984eb6ae1ec1428e5c1636064dcca2e6f8f9fc4dec9fb99ae8cda4f963437d52973f887885fefd0598a1a6a8e9b8c14046ec0853fb7b249f3f0f7fa0e5d1db73f4598d5208a08276b534e0febdb0928dd5ea88089b33e8a1a7d6a457bfaff289398076d79ff4d9ce50011fc5b68e7a9b36b5e2f523038cc5786e7a5e4003a1e564bab00146771c9c6f663854bd6d52f492d3a0a02eea3542a896cdfd291f178f03", 0xc6}, {&(0x7f0000000b40)="2c65ea07468a286bb78f4de506bd68f8eb7687c4b459d8cf887f8550ebc61fb4759d2d451d08e9a67b2fc3778430f7a602c79f4bafac2b5b0d090e42132157348d06620befbe2ff2facbdbab2a7cca247675a41d1bdb9613ab3f9bed3ace9c1bc77a9cd78c10d49af0dc567191215933ffd7c58b60ec2e27c68a463eb5197b675704372bb3d609c6d286be021f2d889949e77d419510cf87564501f3dba2cd1a12626281b03dc5a6887c14a2e9e0a205fbbe019fe466643b42a03dfe64f2b7ee84652c38d5c838c9b617be96097debfd12d6", 0xd2}, {&(0x7f0000000340)="9f68a2", 0x3}, {&(0x7f0000000380)="2b6a8fb998c89d8516f7ce75cb8d61c805d2d2c7929c9220e1f864421921a80d7e9849c10eaeba40ee2bfd8cc08b3387706c5aa5b009556b2ec2286ff97839399c796e5c5eb5dc8aa818b4ff4a981de503df541eb5f298029cd1", 0x5a}, {&(0x7f0000000c40)="11c8c3ebd6b7e124338a2b8428f37a13e4c121039d4ca4e0e20d6d3fd2130262e5ef502bcc59da6b235cdb98214ffae03b7e9862bb3b8f6288bc99a4b8173a7f2677545247f24d1c244c0ed5ca64ac6e0ef979d93fe4b2f9467de35bbc7aefaf520a8752dbbb45496b2cb79c4264fa5940bfbe1224f92597e458e57d8ecceefe3ed4f7adf19f8ec1c63d4c5eb61b6cb207e48636f7", 0x95}, {&(0x7f0000000d00)="8e3d0015067ac29c0d346955d692f571fb10dbf753a948525a95a4a11872e3b414ed3cc525766e5b9d69d5bd5f6024d0331e09d616d86300c9b436e36820525c41975be7c4cf554c707dbcc0f1e33144a5e224bc30e2ed2587f2d470525c637f6242a1021793123f4e3a034abd8f56652d0e3471030aeee00363bd55be77580f0e68cdd41bf6f0a332fb502495c21ed046cd15b4c9fa7eb9f233d457e93551c6e1ab20", 0xa3}], 0x7, 0x0, 0x0, 0x7400}, 0x40094) r9 = userfaultfd(0x80001) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r11, &(0x7f0000000100)=@nl=@unspec, 0x80) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRESOCT=r11, @ANYBLOB="010027bd7000000000001400000018000180140002006e657464657673696d3000000000000005000c000300000008001600ffffffff080003000d00000008000f00050000000800040019dc0000050019"], 0x5c}}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5a8}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r9, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) setsockopt$packet_int(r7, 0x107, 0xb, &(0x7f0000000240)=0x66, 0x4) recvfrom$inet(r7, &(0x7f0000000140)=""/142, 0x8e, 0x1, &(0x7f0000000200)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf2}}, 0x10) r12 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x101000) ioctl$LOOP_SET_STATUS(r12, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x3, 0x0, 0x8, 0x9, "188e914be2c7ac1196f7cfdd99303e5bb9b3308a72ce926228cacee134a0a354c4b126d8aee30349b8036aa09f2b32bad1070038d3336c1051017393804642dc", "16d2bf241787de0938d0260c1bd05a655ea06225c9f465552c008569eaf9f714", [0x9, 0x4]}) executing program 1: mkdir(&(0x7f0000001080)='./file0\x00', 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc038563b, &(0x7f0000000080)={0x0, 0x2, @raw_data=[0x7, 0x5, 0x26, 0x38, 0xfffffffb, 0x6, 0xc3b, 0xc8, 0x6de9, 0x7, 0xfffffff7, 0x5, 0x6, 0x0, 0xff4, 0x401]}) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) chroot(&(0x7f0000000100)='./bus\x00') fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x181bc0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x200006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000091}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r8, {}, {0xb, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x808, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x2, 0x1, {0xffff1c72, 0x10000003, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008810}, 0x8000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x404, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x26001, 0x0) r9 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000000840)=ANY=[], 0x210) sendmsg$nl_route_sched(r9, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x600, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xfff2, 0xffe0}, {0x7}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0xc1) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r10, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x21, 0x1c}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xd, 0x34, @random="3c4e65277debee1f35"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x400000000000007, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0xfffffffffffffff7]}}) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000280)) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='net/udplite\x00') timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2) syz_open_dev$vim2m(&(0x7f0000000300), 0x80000007, 0x2) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r7}, 0x18) executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x3) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000080)={0x1, 0x0, {0x8, 0x7f, 0x7c2, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x10, 0x7, 0x700000, 0xfa, {{0xa, 0x4, 0x3, 0x2e, 0x28, 0x68, 0x0, 0x5, 0x29, 0x0, @rand_addr=0x64010100, @empty, {[@generic={0x44, 0x12, "aa6e2ae553ca0cb2077be4fd9387ff5d"}]}}}}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x53c2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x64, &(0x7f00000001c0)=""/100, 0x41000, 0x72, '\x00', r1, 0x0, r0, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000340)=[r0], &(0x7f0000000380)=[{0x0, 0x3, 0xf, 0x3}, {0x5, 0x1, 0xb, 0x8}, {0x5, 0x800, 0xa}, {0x2, 0x4, 0x2, 0x5a3b26b9c52babf8}, {0x4, 0x5, 0xf, 0xc}], 0x10, 0x5}, 0x94) r3 = syz_open_dev$vim2m(&(0x7f00000004c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000500)) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0xa) r4 = syz_socket_connect_nvme_tcp() r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x80483, 0x0) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) ppoll(&(0x7f0000000580)=[{r0, 0xac}, {r0, 0x106}, {r4}, {r2, 0x110a}, {r5, 0x1}, {r2, 0x2000}, {r3, 0x4040}], 0x7, &(0x7f0000000600)={r6, r7+10000000}, &(0x7f0000000640)={[0x5]}, 0x8) ioctl$TIOCCBRK(r0, 0x5428) writev(r5, &(0x7f0000000700)=[{&(0x7f0000000680)="377497757f1671a199d3674818eb17ddbe92aebbba7e2ec7f5143752977708a4d1adb531e686bff302df4d8ff928ffa9321fc2fabed6008313f95f177d059e54f770590ef303370acbcd56c4a5d0de8efc7f63480817516043b1c09bb5bc377d2d7bef1a42e9f2", 0x67}], 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000740)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) ioctl$KDDISABIO(r8, 0x4b37) r9 = open_tree(r5, &(0x7f0000000780)='./file0\x00', 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r5) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x60, r10, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3b}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff800}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x40) futex_waitv(&(0x7f0000002300)=[{0x6, &(0x7f0000000940)=0x7f, 0x82}, {0x8, &(0x7f0000000980)=0x1000, 0x82}, {0x81, &(0x7f00000009c0)=0xbc, 0x2}, {0x7, &(0x7f0000000a00)=0x3023, 0x82}, {0xa, &(0x7f0000000a40)=0x25e1b6f5, 0x2}, {0x9, &(0x7f0000000a80)=0x101, 0x2}, {0x1, &(0x7f0000000ac0)=0x20000000000, 0x82}, {0x5, &(0x7f0000000b00), 0x2}, {0x6, &(0x7f0000000b40)=0xfffffffffffffffc, 0x2}, {0x1a6c9cbb, &(0x7f0000000b80)=0x2, 0x2}, {0x6, &(0x7f0000000bc0)=0x9, 0x2}, {0x8000000000000000, &(0x7f0000000c00)=0x7a0, 0x2}, {0x5, &(0x7f0000000c40)=0x7, 0x2}, {0x7, &(0x7f0000000c80)=0x5, 0x82}, {0x8, &(0x7f0000000cc0), 0x82}, {0x5, &(0x7f0000000d00)=0x9, 0x2}, {0x0, &(0x7f0000000d40)=0x4be8}, {0x968, &(0x7f0000000d80)=0x2, 0x2}, {0x5, &(0x7f0000000dc0)=0x5, 0x2}, {0x9, &(0x7f0000000e00)=0x100, 0x82}, {0x9, &(0x7f0000000e40)=0xdede, 0x2}, {0x2, &(0x7f0000000e80)=0x8000000000000001, 0x82}, {0x2, &(0x7f0000000ec0)=0xffffffff, 0x2}, {0x3, &(0x7f0000000f00), 0x2}, {0x1a89, &(0x7f0000000f40)=0x5, 0x2}, {0x6645, &(0x7f0000000f80)=0x4, 0x82}, {0xff, &(0x7f0000000fc0)=0x8000, 0x2}, {0x2, &(0x7f0000001000)=0x7ff, 0x2}, {0x2, &(0x7f0000001040)=0x5, 0x82}, {0xfffffffffffff5fe, &(0x7f0000001080)=0x6, 0x2}, {0x7, &(0x7f00000010c0)=0x7fff, 0x2}, {0x6, &(0x7f0000001100)=0x3, 0x82}, {0x2, &(0x7f0000001140)=0x55480606, 0x2}, {0x1, &(0x7f0000001180)=0xdf9, 0x2}, {0x200, &(0x7f00000011c0)=0x9, 0x82}, {0x9, &(0x7f0000001200)=0x7f, 0x1}, {0xb, &(0x7f0000001240)=0x329, 0x82}, {0x5, &(0x7f0000001280)=0x8, 0x82}, {0x8001, &(0x7f00000012c0)=0xf37, 0x82}, {0x2, &(0x7f0000001300), 0x2}, {0x1, &(0x7f0000001340)=0x7, 0x2}, {0x2d, &(0x7f0000001380)=0xba, 0x82}, {0x0, &(0x7f00000013c0)=0x3, 0x2}, {0x8, &(0x7f0000001400)=0x2, 0x82}, {0x547fb2c7, &(0x7f0000001440)=0x9, 0x82}, {0x9, &(0x7f0000001480)=0xffff, 0x82}, {0x4000000000, &(0x7f00000014c0)=0x3a1, 0x82}, {0x7, &(0x7f0000001500)=0xa, 0x82}, {0x40, &(0x7f0000001540)=0x1000, 0x82}, {0x1, &(0x7f0000001580)=0x9, 0x82}, {0xc302, &(0x7f00000015c0)=0x5, 0x82}, {0x2, &(0x7f0000001600)=0x7, 0x2}, {0xfff, &(0x7f0000001640)=0x60be, 0x82}, {0x100, &(0x7f0000001680)=0x8000000000, 0x2}, {0x100000001, &(0x7f00000016c0)=0x7fffffff, 0x82}, {0x0, &(0x7f0000001700)=0x2}, {0x8, &(0x7f0000001740)=0xffffffffffffffff, 0x82}, {0xd2, &(0x7f0000001780)=0x5, 0x2}, {0xfffffffffffffffa, &(0x7f00000017c0)=0x7, 0x2}, {0x6, &(0x7f0000001800)=0x6, 0x2}, {0x8001, &(0x7f0000001840)=0x81, 0x2}, {0xd, &(0x7f0000001880)=0xf3, 0x2}, {0x2, &(0x7f00000018c0)=0x2, 0x82}, {0x10001, &(0x7f0000001900)=0x9, 0x2}, {0x4, &(0x7f0000001940)=0x7, 0x82}, {0x6, &(0x7f0000001980)=0x1, 0x82}, {0x1, &(0x7f00000019c0)=0x9, 0x82}, {0x9, &(0x7f0000001a00)=0x81, 0x82}, {0x3, &(0x7f0000001a40)=0xb, 0x82}, {0x1, &(0x7f0000001a80)=0x8, 0x2}, {0x8, &(0x7f0000001ac0)=0x2, 0x2}, {0x5, &(0x7f0000001b00)=0x2}, {0x7, &(0x7f0000001b40)=0x8, 0x82}, {0x5, &(0x7f0000001b80)=0x6, 0x2}, {0x6, &(0x7f0000001bc0)=0x9, 0x82}, {0x6, &(0x7f0000001c00)=0x6, 0x2}, {0x4, &(0x7f0000001c40)=0x2, 0x2}, {0xfff, &(0x7f0000001c80)=0xfffffffffffffffd, 0x82}, {0x3, &(0x7f0000001cc0)=0x3, 0x2}, {0x3bd, &(0x7f0000001d00)=0x9, 0x2}, {0x3, &(0x7f0000001d40)=0x1, 0x2}, {0x2, &(0x7f0000001d80)=0x1, 0x2}, {0x0, &(0x7f0000001dc0)=0xf, 0x2}, {0x4, &(0x7f0000001e00)=0x10000, 0x82}, {0x800, &(0x7f0000001e40)=0x9, 0x82}, {0x3, &(0x7f0000001e80)=0x8, 0x82}, {0x0, &(0x7f0000001ec0)=0x2, 0x82}, {0xffffffffffffff7e, &(0x7f0000001f00)=0x9, 0x2}, {0x6, &(0x7f0000001f40)=0x2, 0x82}, {0x7, &(0x7f0000001f80)=0xffffffff7fffffff, 0x82}, {0x10, &(0x7f0000001fc0), 0x82}, {0x5, &(0x7f0000002000)=0x6, 0x82}, {0x7, &(0x7f0000002040)=0x6, 0x82}, {0x3, &(0x7f0000002080)=0x1, 0x82}, {0x0, &(0x7f00000020c0)=0x9, 0x2}, {0x8f, &(0x7f0000002100)=0x8, 0x2}, {0xfff, &(0x7f0000002140)=0x9, 0x2}, {0x0, &(0x7f0000002180)=0x100000001, 0x82}, {0x5cb, &(0x7f00000021c0)=0x5, 0x2}, {0x3, &(0x7f0000002200), 0x82}, {0x9, &(0x7f0000002240)=0x5, 0x2}, {0x10000, &(0x7f0000002280)=0x5, 0x2}, {0xff00000, &(0x7f00000022c0)=0x98, 0x2}], 0x67, 0x0, &(0x7f0000002cc0)={0x77359400}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000002dc0)={'ip6_vti0\x00', &(0x7f0000002d40)={'ip6tnl0\x00', r1, 0x2f, 0x2, 0x3, 0x1, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x40}, 0x7800, 0x7800, 0x2, 0x3}}) sendmsg$nl_route(r0, &(0x7f0000002f80)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002e00)=@RTM_NEWMDB={0x138, 0x54, 0x4, 0x70bd2d, 0x25dfdbfd, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x0, 0x2, 0x3, {@in6_addr=@mcast2}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x2, 0x3, {@ip4=@private=0xa010102, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x2, 0x0, {@ip4=@remote, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x3, 0x3, {@ip4=@multicast1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x2, 0x4, {@ip4=@local}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x0, 0x2, {@ip4=@broadcast, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x3, 0x0, {@ip4=@empty, 0x10dba}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x3, 0x2, {@ip4=@multicast1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x1, 0x0, {@ip4=@multicast2, 0x800}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004005}, 0x80) recvfrom(r4, &(0x7f0000002fc0)=""/41, 0x29, 0x140, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000008d80)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000008bc0)=[{{&(0x7f0000003000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000003240)=[{&(0x7f0000003080)=""/99, 0x63}, {&(0x7f0000003100)=""/177, 0xb1}, {&(0x7f00000031c0)=""/98, 0x62}], 0x3, &(0x7f0000003280)=""/210, 0xd2}, 0x80000000}, {{&(0x7f0000003380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/57, 0x39}, {&(0x7f0000003440)=""/72, 0x48}, {&(0x7f00000034c0)=""/175, 0xaf}, {&(0x7f0000003580)=""/57, 0x39}, {&(0x7f00000035c0)=""/250, 0xfa}], 0x5, &(0x7f0000003740)=""/202, 0xca}, 0x4}, {{&(0x7f0000003840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000039c0)=[{&(0x7f00000038c0)=""/224, 0xe0}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000003a00)=""/79, 0x4f}, {&(0x7f0000003a80)=""/161, 0xa1}, {&(0x7f0000003b40)=""/121, 0x79}, {&(0x7f0000003bc0)=""/234, 0xea}, {&(0x7f0000003cc0)=""/70, 0x46}], 0x5, &(0x7f0000003dc0)=""/60, 0x3c}, 0x8}, {{0x0, 0x0, &(0x7f0000006100)=[{&(0x7f0000003e00)=""/90, 0x5a}, {&(0x7f0000003e80)=""/42, 0x2a}, {&(0x7f0000003ec0)=""/147, 0x93}, {&(0x7f0000003f80)=""/12, 0xc}, {&(0x7f0000003fc0)=""/2, 0x2}, {&(0x7f0000004000)=""/225, 0xe1}, {&(0x7f0000004100)=""/4096, 0x1000}, {&(0x7f0000005100)=""/4096, 0x1000}], 0x8, &(0x7f0000006180)=""/9, 0x9}, 0x3}, {{0x0, 0x0, &(0x7f00000076c0)=[{&(0x7f00000061c0)=""/216, 0xd8}, {&(0x7f00000062c0)=""/146, 0x92}, {&(0x7f0000006380)=""/160, 0xa0}, {&(0x7f0000006440)=""/160, 0xa0}, {&(0x7f0000006500)=""/50, 0x32}, {&(0x7f0000006540)=""/4096, 0x1000}, {&(0x7f0000007540)=""/207, 0xcf}, {&(0x7f0000007640)=""/81, 0x51}], 0x8}, 0x200}, {{&(0x7f0000007740)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000008ac0)=[{&(0x7f00000077c0)}, {&(0x7f0000007800)=""/4096, 0x1000}, {&(0x7f0000008800)=""/234, 0xea}, {&(0x7f0000008900)=""/116, 0x74}, {&(0x7f0000008980)=""/7, 0x7}, {&(0x7f00000089c0)=""/176, 0xb0}, {&(0x7f0000008a80)=""/23, 0x17}], 0x7, &(0x7f0000008b40)=""/80, 0x50}, 0x100000}], 0x7, 0x0, &(0x7f0000008dc0)={r12, r13+60000000}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000008e80)={'ip6tnl0\x00', &(0x7f0000008e00)={'syztnl0\x00', r11, 0x4, 0x3, 0x0, 0x6, 0x14, @loopback, @private1, 0x1, 0x20, 0x4, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000008ec0)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000008f00)={{{@in=@multicast2, @in6=@mcast2, 0x4e20, 0x2, 0x4e23, 0x0, 0x2, 0x20, 0x0, 0x0, r14, r16}, {0x4, 0x39ff000, 0x1, 0x3, 0x100, 0x7, 0xfffffffffffff713, 0x6}, {0xd, 0x7, 0x2d, 0xffffffff}, 0x8001, 0x6e6bbc, 0x1, 0x1, 0x2, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4d5, 0x2b}, 0xa, @in=@multicast1, 0x0, 0x0, 0x1, 0x8, 0x4, 0x800}}, 0xe8) r17 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000a280)={0x18, 0x1c, &(0x7f0000009040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @ldst={0x0, 0x2, 0x1, 0xb, 0x5, 0xffffffffffffffff, 0xfffffffffffffff0}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xd}, @generic={0x5d, 0xc, 0x2, 0x7ff, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000009140)='GPL\x00', 0x6, 0x1000, &(0x7f0000009180)=""/4096, 0x41000, 0x16, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f000000a180)={0x0, 0x3}, 0x8, 0x10, &(0x7f000000a1c0)={0x1, 0x4, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f000000a200)=[r8], &(0x7f000000a240)=[{0x1, 0x3, 0x9, 0x6}, {0x1, 0x2, 0x5, 0x4}, {0x4, 0x3, 0x7, 0xc}]}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f000000a340)={&(0x7f0000009000)='damon_aggregated\x00', r17, 0x0, 0x1ab}, 0x18) program did not crash replaying the whole log did not cause a kernel crash single: executing 5 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$AUTOFS_DEV_IOCTL_EXPIRE-ioctl$TIOCPKT-ioctl$VIDIOC_SUBDEV_G_CROP-ioctl$sock_ipv6_tunnel_SIOCGET6RD-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_STREAMOFF-ioctl$UI_SET_PROPBIT-syz_socket_connect_nvme_tcp-openat$vcs-clock_gettime-ppoll-ioctl$TIOCCBRK-writev-ioctl$AUTOFS_DEV_IOCTL_PROTOVER-ioctl$KDDISABIO-open_tree-syz_genetlink_get_family_id$ipvs-sendmsg$IPVS_CMD_NEW_DAEMON-futex_waitv-ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL-sendmsg$nl_route-recvfrom-clock_gettime-recvmmsg-ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL-ioctl$AUTOFS_DEV_IOCTL_REQUESTER-setsockopt$inet6_IPV6_IPSEC_POLICY-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN detailed listing: executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x3) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000080)={0x1, 0x0, {0x8, 0x7f, 0x7c2, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x10, 0x7, 0x700000, 0xfa, {{0xa, 0x4, 0x3, 0x2e, 0x28, 0x68, 0x0, 0x5, 0x29, 0x0, @rand_addr=0x64010100, @empty, {[@generic={0x44, 0x12, "aa6e2ae553ca0cb2077be4fd9387ff5d"}]}}}}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x53c2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x64, &(0x7f00000001c0)=""/100, 0x41000, 0x72, '\x00', r1, 0x0, r0, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000340)=[r0], &(0x7f0000000380)=[{0x0, 0x3, 0xf, 0x3}, {0x5, 0x1, 0xb, 0x8}, {0x5, 0x800, 0xa}, {0x2, 0x4, 0x2, 0x5a3b26b9c52babf8}, {0x4, 0x5, 0xf, 0xc}], 0x10, 0x5}, 0x94) r3 = syz_open_dev$vim2m(&(0x7f00000004c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000500)) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0xa) r4 = syz_socket_connect_nvme_tcp() r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x80483, 0x0) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) ppoll(&(0x7f0000000580)=[{r0, 0xac}, {r0, 0x106}, {r4}, {r2, 0x110a}, {r5, 0x1}, {r2, 0x2000}, {r3, 0x4040}], 0x7, &(0x7f0000000600)={r6, r7+10000000}, &(0x7f0000000640)={[0x5]}, 0x8) ioctl$TIOCCBRK(r0, 0x5428) writev(r5, &(0x7f0000000700)=[{&(0x7f0000000680)="377497757f1671a199d3674818eb17ddbe92aebbba7e2ec7f5143752977708a4d1adb531e686bff302df4d8ff928ffa9321fc2fabed6008313f95f177d059e54f770590ef303370acbcd56c4a5d0de8efc7f63480817516043b1c09bb5bc377d2d7bef1a42e9f2", 0x67}], 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000740)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) ioctl$KDDISABIO(r8, 0x4b37) r9 = open_tree(r5, &(0x7f0000000780)='./file0\x00', 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r5) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x60, r10, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3b}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff800}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x40) futex_waitv(&(0x7f0000002300)=[{0x6, &(0x7f0000000940)=0x7f, 0x82}, {0x8, &(0x7f0000000980)=0x1000, 0x82}, {0x81, &(0x7f00000009c0)=0xbc, 0x2}, {0x7, &(0x7f0000000a00)=0x3023, 0x82}, {0xa, &(0x7f0000000a40)=0x25e1b6f5, 0x2}, {0x9, &(0x7f0000000a80)=0x101, 0x2}, {0x1, &(0x7f0000000ac0)=0x20000000000, 0x82}, {0x5, &(0x7f0000000b00), 0x2}, {0x6, &(0x7f0000000b40)=0xfffffffffffffffc, 0x2}, {0x1a6c9cbb, &(0x7f0000000b80)=0x2, 0x2}, {0x6, &(0x7f0000000bc0)=0x9, 0x2}, {0x8000000000000000, &(0x7f0000000c00)=0x7a0, 0x2}, {0x5, &(0x7f0000000c40)=0x7, 0x2}, {0x7, &(0x7f0000000c80)=0x5, 0x82}, {0x8, &(0x7f0000000cc0), 0x82}, {0x5, &(0x7f0000000d00)=0x9, 0x2}, {0x0, &(0x7f0000000d40)=0x4be8}, {0x968, &(0x7f0000000d80)=0x2, 0x2}, {0x5, &(0x7f0000000dc0)=0x5, 0x2}, {0x9, &(0x7f0000000e00)=0x100, 0x82}, {0x9, &(0x7f0000000e40)=0xdede, 0x2}, {0x2, &(0x7f0000000e80)=0x8000000000000001, 0x82}, {0x2, &(0x7f0000000ec0)=0xffffffff, 0x2}, {0x3, &(0x7f0000000f00), 0x2}, {0x1a89, &(0x7f0000000f40)=0x5, 0x2}, {0x6645, &(0x7f0000000f80)=0x4, 0x82}, {0xff, &(0x7f0000000fc0)=0x8000, 0x2}, {0x2, &(0x7f0000001000)=0x7ff, 0x2}, {0x2, &(0x7f0000001040)=0x5, 0x82}, {0xfffffffffffff5fe, &(0x7f0000001080)=0x6, 0x2}, {0x7, &(0x7f00000010c0)=0x7fff, 0x2}, {0x6, &(0x7f0000001100)=0x3, 0x82}, {0x2, &(0x7f0000001140)=0x55480606, 0x2}, {0x1, &(0x7f0000001180)=0xdf9, 0x2}, {0x200, &(0x7f00000011c0)=0x9, 0x82}, {0x9, &(0x7f0000001200)=0x7f, 0x1}, {0xb, &(0x7f0000001240)=0x329, 0x82}, {0x5, &(0x7f0000001280)=0x8, 0x82}, {0x8001, &(0x7f00000012c0)=0xf37, 0x82}, {0x2, &(0x7f0000001300), 0x2}, {0x1, &(0x7f0000001340)=0x7, 0x2}, {0x2d, &(0x7f0000001380)=0xba, 0x82}, {0x0, &(0x7f00000013c0)=0x3, 0x2}, {0x8, &(0x7f0000001400)=0x2, 0x82}, {0x547fb2c7, &(0x7f0000001440)=0x9, 0x82}, {0x9, &(0x7f0000001480)=0xffff, 0x82}, {0x4000000000, &(0x7f00000014c0)=0x3a1, 0x82}, {0x7, &(0x7f0000001500)=0xa, 0x82}, {0x40, &(0x7f0000001540)=0x1000, 0x82}, {0x1, &(0x7f0000001580)=0x9, 0x82}, {0xc302, &(0x7f00000015c0)=0x5, 0x82}, {0x2, &(0x7f0000001600)=0x7, 0x2}, {0xfff, &(0x7f0000001640)=0x60be, 0x82}, {0x100, &(0x7f0000001680)=0x8000000000, 0x2}, {0x100000001, &(0x7f00000016c0)=0x7fffffff, 0x82}, {0x0, &(0x7f0000001700)=0x2}, {0x8, &(0x7f0000001740)=0xffffffffffffffff, 0x82}, {0xd2, &(0x7f0000001780)=0x5, 0x2}, {0xfffffffffffffffa, &(0x7f00000017c0)=0x7, 0x2}, {0x6, &(0x7f0000001800)=0x6, 0x2}, {0x8001, &(0x7f0000001840)=0x81, 0x2}, {0xd, &(0x7f0000001880)=0xf3, 0x2}, {0x2, &(0x7f00000018c0)=0x2, 0x82}, {0x10001, &(0x7f0000001900)=0x9, 0x2}, {0x4, &(0x7f0000001940)=0x7, 0x82}, {0x6, &(0x7f0000001980)=0x1, 0x82}, {0x1, &(0x7f00000019c0)=0x9, 0x82}, {0x9, &(0x7f0000001a00)=0x81, 0x82}, {0x3, &(0x7f0000001a40)=0xb, 0x82}, {0x1, &(0x7f0000001a80)=0x8, 0x2}, {0x8, &(0x7f0000001ac0)=0x2, 0x2}, {0x5, &(0x7f0000001b00)=0x2}, {0x7, &(0x7f0000001b40)=0x8, 0x82}, {0x5, &(0x7f0000001b80)=0x6, 0x2}, {0x6, &(0x7f0000001bc0)=0x9, 0x82}, {0x6, &(0x7f0000001c00)=0x6, 0x2}, {0x4, &(0x7f0000001c40)=0x2, 0x2}, {0xfff, &(0x7f0000001c80)=0xfffffffffffffffd, 0x82}, {0x3, &(0x7f0000001cc0)=0x3, 0x2}, {0x3bd, &(0x7f0000001d00)=0x9, 0x2}, {0x3, &(0x7f0000001d40)=0x1, 0x2}, {0x2, &(0x7f0000001d80)=0x1, 0x2}, {0x0, &(0x7f0000001dc0)=0xf, 0x2}, {0x4, &(0x7f0000001e00)=0x10000, 0x82}, {0x800, &(0x7f0000001e40)=0x9, 0x82}, {0x3, &(0x7f0000001e80)=0x8, 0x82}, {0x0, &(0x7f0000001ec0)=0x2, 0x82}, {0xffffffffffffff7e, &(0x7f0000001f00)=0x9, 0x2}, {0x6, &(0x7f0000001f40)=0x2, 0x82}, {0x7, &(0x7f0000001f80)=0xffffffff7fffffff, 0x82}, {0x10, &(0x7f0000001fc0), 0x82}, {0x5, &(0x7f0000002000)=0x6, 0x82}, {0x7, &(0x7f0000002040)=0x6, 0x82}, {0x3, &(0x7f0000002080)=0x1, 0x82}, {0x0, &(0x7f00000020c0)=0x9, 0x2}, {0x8f, &(0x7f0000002100)=0x8, 0x2}, {0xfff, &(0x7f0000002140)=0x9, 0x2}, {0x0, &(0x7f0000002180)=0x100000001, 0x82}, {0x5cb, &(0x7f00000021c0)=0x5, 0x2}, {0x3, &(0x7f0000002200), 0x82}, {0x9, &(0x7f0000002240)=0x5, 0x2}, {0x10000, &(0x7f0000002280)=0x5, 0x2}, {0xff00000, &(0x7f00000022c0)=0x98, 0x2}], 0x67, 0x0, &(0x7f0000002cc0)={0x77359400}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000002dc0)={'ip6_vti0\x00', &(0x7f0000002d40)={'ip6tnl0\x00', r1, 0x2f, 0x2, 0x3, 0x1, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x40}, 0x7800, 0x7800, 0x2, 0x3}}) sendmsg$nl_route(r0, &(0x7f0000002f80)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002e00)=@RTM_NEWMDB={0x138, 0x54, 0x4, 0x70bd2d, 0x25dfdbfd, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x0, 0x2, 0x3, {@in6_addr=@mcast2}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x2, 0x3, {@ip4=@private=0xa010102, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x2, 0x0, {@ip4=@remote, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x3, 0x3, {@ip4=@multicast1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x2, 0x4, {@ip4=@local}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x0, 0x2, {@ip4=@broadcast, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x3, 0x0, {@ip4=@empty, 0x10dba}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x3, 0x2, {@ip4=@multicast1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x1, 0x0, {@ip4=@multicast2, 0x800}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004005}, 0x80) recvfrom(r4, &(0x7f0000002fc0)=""/41, 0x29, 0x140, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000008d80)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000008bc0)=[{{&(0x7f0000003000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000003240)=[{&(0x7f0000003080)=""/99, 0x63}, {&(0x7f0000003100)=""/177, 0xb1}, {&(0x7f00000031c0)=""/98, 0x62}], 0x3, &(0x7f0000003280)=""/210, 0xd2}, 0x80000000}, {{&(0x7f0000003380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/57, 0x39}, {&(0x7f0000003440)=""/72, 0x48}, {&(0x7f00000034c0)=""/175, 0xaf}, {&(0x7f0000003580)=""/57, 0x39}, {&(0x7f00000035c0)=""/250, 0xfa}], 0x5, &(0x7f0000003740)=""/202, 0xca}, 0x4}, {{&(0x7f0000003840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000039c0)=[{&(0x7f00000038c0)=""/224, 0xe0}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000003a00)=""/79, 0x4f}, {&(0x7f0000003a80)=""/161, 0xa1}, {&(0x7f0000003b40)=""/121, 0x79}, {&(0x7f0000003bc0)=""/234, 0xea}, {&(0x7f0000003cc0)=""/70, 0x46}], 0x5, &(0x7f0000003dc0)=""/60, 0x3c}, 0x8}, {{0x0, 0x0, &(0x7f0000006100)=[{&(0x7f0000003e00)=""/90, 0x5a}, {&(0x7f0000003e80)=""/42, 0x2a}, {&(0x7f0000003ec0)=""/147, 0x93}, {&(0x7f0000003f80)=""/12, 0xc}, {&(0x7f0000003fc0)=""/2, 0x2}, {&(0x7f0000004000)=""/225, 0xe1}, {&(0x7f0000004100)=""/4096, 0x1000}, {&(0x7f0000005100)=""/4096, 0x1000}], 0x8, &(0x7f0000006180)=""/9, 0x9}, 0x3}, {{0x0, 0x0, &(0x7f00000076c0)=[{&(0x7f00000061c0)=""/216, 0xd8}, {&(0x7f00000062c0)=""/146, 0x92}, {&(0x7f0000006380)=""/160, 0xa0}, {&(0x7f0000006440)=""/160, 0xa0}, {&(0x7f0000006500)=""/50, 0x32}, {&(0x7f0000006540)=""/4096, 0x1000}, {&(0x7f0000007540)=""/207, 0xcf}, {&(0x7f0000007640)=""/81, 0x51}], 0x8}, 0x200}, {{&(0x7f0000007740)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000008ac0)=[{&(0x7f00000077c0)}, {&(0x7f0000007800)=""/4096, 0x1000}, {&(0x7f0000008800)=""/234, 0xea}, {&(0x7f0000008900)=""/116, 0x74}, {&(0x7f0000008980)=""/7, 0x7}, {&(0x7f00000089c0)=""/176, 0xb0}, {&(0x7f0000008a80)=""/23, 0x17}], 0x7, &(0x7f0000008b40)=""/80, 0x50}, 0x100000}], 0x7, 0x0, &(0x7f0000008dc0)={r12, r13+60000000}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000008e80)={'ip6tnl0\x00', &(0x7f0000008e00)={'syztnl0\x00', r11, 0x4, 0x3, 0x0, 0x6, 0x14, @loopback, @private1, 0x1, 0x20, 0x4, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000008ec0)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000008f00)={{{@in=@multicast2, @in6=@mcast2, 0x4e20, 0x2, 0x4e23, 0x0, 0x2, 0x20, 0x0, 0x0, r14, r16}, {0x4, 0x39ff000, 0x1, 0x3, 0x100, 0x7, 0xfffffffffffff713, 0x6}, {0xd, 0x7, 0x2d, 0xffffffff}, 0x8001, 0x6e6bbc, 0x1, 0x1, 0x2, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4d5, 0x2b}, 0xa, @in=@multicast1, 0x0, 0x0, 0x1, 0x8, 0x4, 0x800}}, 0xe8) r17 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000a280)={0x18, 0x1c, &(0x7f0000009040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @ldst={0x0, 0x2, 0x1, 0xb, 0x5, 0xffffffffffffffff, 0xfffffffffffffff0}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xd}, @generic={0x5d, 0xc, 0x2, 0x7ff, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000009140)='GPL\x00', 0x6, 0x1000, &(0x7f0000009180)=""/4096, 0x41000, 0x16, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f000000a180)={0x0, 0x3}, 0x8, 0x10, &(0x7f000000a1c0)={0x1, 0x4, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f000000a200)=[r8], &(0x7f000000a240)=[{0x1, 0x3, 0x9, 0x6}, {0x1, 0x2, 0x5, 0x4}, {0x4, 0x3, 0x7, 0xc}]}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f000000a340)={&(0x7f0000009000)='damon_aggregated\x00', r17, 0x0, 0x1ab}, 0x18) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-syz_open_dev$video4linux-ioctl$VIDIOC_TRY_DECODER_CMD-mkdir-chroot-fcntl$lock-openat$tun-ioctl$TUNSETIFF-openat$tun-close-socket$nl_generic-syz_genetlink_get_family_id$tipc-sendmsg$TIPC_CMD_ENABLE_BEARER-ioctl$SIOCSIFHWADDR-openat$tun-close-socket$nl_route-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-ioctl$SIOCSIFHWADDR-mount$overlay-openat$rfkill-socket-setsockopt$inet6_MCAST_MSFILTER-sendmsg$nl_route_sched-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_DEAUTHENTICATE detailed listing: executing program 0: mkdir(&(0x7f0000001080)='./file0\x00', 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc038563b, &(0x7f0000000080)={0x0, 0x2, @raw_data=[0x7, 0x5, 0x26, 0x38, 0xfffffffb, 0x6, 0xc3b, 0xc8, 0x6de9, 0x7, 0xfffffff7, 0x5, 0x6, 0x0, 0xff4, 0x401]}) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) chroot(&(0x7f0000000100)='./bus\x00') fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x181bc0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x200006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000091}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r8, {}, {0xb, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x808, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x2, 0x1, {0xffff1c72, 0x10000003, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008810}, 0x8000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x404, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x26001, 0x0) r9 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000000840)=ANY=[], 0x210) sendmsg$nl_route_sched(r9, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x600, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xfff2, 0xffe0}, {0x7}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0xc1) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r10, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x21, 0x1c}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xd, 0x34, @random="3c4e65277debee1f35"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$sndctrl-ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE-fsopen-fsconfig$FSCONFIG_SET_FLAG-socket$nl_generic-syz_genetlink_get_family_id$batadv-ioctl$ifreq_SIOCGIFINDEX_batadv_mesh-sendmsg$BATADV_CMD_SET_MESH-socket$nl_route-ioctl$ifreq_SIOCGIFINDEX_batadv_mesh-sendmsg$nl_route-fsmount-madvise-socket$kcm-sendmsg$kcm-userfaultfd-socket$nl_generic-syz_genetlink_get_family_id$ethtool-syz_init_net_socket$802154_dgram-connect-sendmsg$ETHTOOL_MSG_COALESCE_SET-bind$netlink-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-ioctl$UFFDIO_COPY-fsconfig$FSCONFIG_CMD_RECONFIGURE-setsockopt$packet_int-recvfrom$inet-syz_open_dev$loop-ioctl$LOOP_SET_STATUS detailed listing: executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x3, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x40, 0x8, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4000000000000000, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x8001, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0x3, 0x1, 0x4000, 0xfffffffffffffffe, 0x0, 0x0, 0x2]}) r1 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000e40)=ANY=[@ANYBLOB="2c00000076ae9bd8af9b9b92b73024b52ff1c75b389bb4af4070e0383c8e9c5bc544856e6f0758761cfc42ef97d04df5a94736a769a7baa0640765fefeac82645b635ff74e58a0534cc87412477cb01b70427dcc7cec9c0e43ba92c5fa75e6da32a4325163b629f62c1f9ee128e216839c4ad286b33284d791e82e5948cfe5acbed9ef1204d26aff86e4dc8db919dee50f258e82c70fe8e224a466e29a601a1ad1262aa935aa187004ee4c564db855673f850ba649f8de8e3fdb753b383887", @ANYRES16=r3, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYRES32=r4, @ANYBLOB="0500330001000000"], 0x2c}}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r7 = fsmount(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000300)="3e03bf40e733ef93012f997edf26de", 0xf}, {&(0x7f0000000a40)="19a58c380094d99c17c0d2e2d01f00cee989b9687810301d82c9c946831a0c1bb139974c7a984eb6ae1ec1428e5c1636064dcca2e6f8f9fc4dec9fb99ae8cda4f963437d52973f887885fefd0598a1a6a8e9b8c14046ec0853fb7b249f3f0f7fa0e5d1db73f4598d5208a08276b534e0febdb0928dd5ea88089b33e8a1a7d6a457bfaff289398076d79ff4d9ce50011fc5b68e7a9b36b5e2f523038cc5786e7a5e4003a1e564bab00146771c9c6f663854bd6d52f492d3a0a02eea3542a896cdfd291f178f03", 0xc6}, {&(0x7f0000000b40)="2c65ea07468a286bb78f4de506bd68f8eb7687c4b459d8cf887f8550ebc61fb4759d2d451d08e9a67b2fc3778430f7a602c79f4bafac2b5b0d090e42132157348d06620befbe2ff2facbdbab2a7cca247675a41d1bdb9613ab3f9bed3ace9c1bc77a9cd78c10d49af0dc567191215933ffd7c58b60ec2e27c68a463eb5197b675704372bb3d609c6d286be021f2d889949e77d419510cf87564501f3dba2cd1a12626281b03dc5a6887c14a2e9e0a205fbbe019fe466643b42a03dfe64f2b7ee84652c38d5c838c9b617be96097debfd12d6", 0xd2}, {&(0x7f0000000340)="9f68a2", 0x3}, {&(0x7f0000000380)="2b6a8fb998c89d8516f7ce75cb8d61c805d2d2c7929c9220e1f864421921a80d7e9849c10eaeba40ee2bfd8cc08b3387706c5aa5b009556b2ec2286ff97839399c796e5c5eb5dc8aa818b4ff4a981de503df541eb5f298029cd1", 0x5a}, {&(0x7f0000000c40)="11c8c3ebd6b7e124338a2b8428f37a13e4c121039d4ca4e0e20d6d3fd2130262e5ef502bcc59da6b235cdb98214ffae03b7e9862bb3b8f6288bc99a4b8173a7f2677545247f24d1c244c0ed5ca64ac6e0ef979d93fe4b2f9467de35bbc7aefaf520a8752dbbb45496b2cb79c4264fa5940bfbe1224f92597e458e57d8ecceefe3ed4f7adf19f8ec1c63d4c5eb61b6cb207e48636f7", 0x95}, {&(0x7f0000000d00)="8e3d0015067ac29c0d346955d692f571fb10dbf753a948525a95a4a11872e3b414ed3cc525766e5b9d69d5bd5f6024d0331e09d616d86300c9b436e36820525c41975be7c4cf554c707dbcc0f1e33144a5e224bc30e2ed2587f2d470525c637f6242a1021793123f4e3a034abd8f56652d0e3471030aeee00363bd55be77580f0e68cdd41bf6f0a332fb502495c21ed046cd15b4c9fa7eb9f233d457e93551c6e1ab20", 0xa3}], 0x7, 0x0, 0x0, 0x7400}, 0x40094) r9 = userfaultfd(0x80001) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r11, &(0x7f0000000100)=@nl=@unspec, 0x80) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRESOCT=r11, @ANYBLOB="010027bd7000000000001400000018000180140002006e657464657673696d3000000000000005000c000300000008001600ffffffff080003000d00000008000f00050000000800040019dc0000050019"], 0x5c}}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5a8}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r9, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) setsockopt$packet_int(r7, 0x107, 0xb, &(0x7f0000000240)=0x66, 0x4) recvfrom$inet(r7, &(0x7f0000000140)=""/142, 0x8e, 0x1, &(0x7f0000000200)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf2}}, 0x10) r12 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x101000) ioctl$LOOP_SET_STATUS(r12, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x3, 0x0, 0x8, 0x9, "188e914be2c7ac1196f7cfdd99303e5bb9b3308a72ce926228cacee134a0a354c4b126d8aee30349b8036aa09f2b32bad1070038d3336c1051017393804642dc", "16d2bf241787de0938d0260c1bd05a655ea06225c9f465552c008569eaf9f714", [0x9, 0x4]}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open-syz_emit_ethernet-fcntl$setlease-open-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_usb_connect-syz_open_dev$I2C-sched_setscheduler-prctl$PR_SCHED_CORE-sched_setaffinity-syz_open_dev$MSR-read$msr-socket$key-sendmsg$key-syz_emit_vhci-futex-bpf$PROG_LOAD-socket$kcm-socket$netlink-bpf$PROG_LOAD detailed listing: executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@random="0f539af21094", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x1, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc}}]}]}}}}}}}, 0x0) fcntl$setlease(r0, 0x400, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000008000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x1}, 0x94) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x82083) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x4, 0x0, 0xe, 0xa, 0x0, 0x0, 0xfffffffe, [@sadb_address={0x3, 0x6, 0xff, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010102}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x4, 0xf}, @sadb_address={0x3, 0x5, 0x33, 0x0, 0x0, @in={0x2, 0x0, @private=0xa010100}}]}, 0x50}, 0x1, 0x7}, 0x4000000) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001c000000bca30000000000002403000020feffff620a00fef8ffffff71a400fe000000001f03000000000000e500060000f300002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO-socket$inet6_udp-openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-eventfd-ioctl$KVM_HYPERV_EVENTFD-prctl$PR_SCHED_CORE-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-fsopen-fsconfig$FSCONFIG_CMD_CREATE-socket$inet6_udp-socket$nl_generic-syz_genetlink_get_family_id$l2tp-socket$nl_route-sendmsg$nl_route-fsmount-fchdir-symlink-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-memfd_create detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x2, r3}) r4 = eventfd(0xffffffff) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000240)={0x2, r4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000ffff23bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14000400011a04001c00128009000100626f6e64000000000c0002800800aba772bd0000"], 0x3c}, 0x1, 0x0, 0x0, 0xc0814}, 0x20040040) r9 = fsmount(r7, 0x0, 0x80) fchdir(r9) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r10 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r10, 0x3518, 0xaddf, 0x2, 0x0, 0x0) memfd_create(&(0x7f0000000100)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) program crashed: WARNING in dev_shutdown single: successfully extracted reproducer found reproducer with 30 syscalls minimizing guilty program testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO-socket$inet6_udp-openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-eventfd-ioctl$KVM_HYPERV_EVENTFD-prctl$PR_SCHED_CORE-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-fsopen-fsconfig$FSCONFIG_CMD_CREATE-socket$inet6_udp-socket$nl_generic-syz_genetlink_get_family_id$l2tp-socket$nl_route-sendmsg$nl_route-fsmount-fchdir-symlink-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x2, r3}) r4 = eventfd(0xffffffff) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000240)={0x2, r4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000ffff23bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14000400011a04001c00128009000100626f6e64000000000c0002800800aba772bd0000"], 0x3c}, 0x1, 0x0, 0x0, 0xc0814}, 0x20040040) r9 = fsmount(r7, 0x0, 0x80) fchdir(r9) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r10 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r10, 0x3518, 0xaddf, 0x2, 0x0, 0x0) program crashed: WARNING in dev_shutdown testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO-socket$inet6_udp-openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-eventfd-ioctl$KVM_HYPERV_EVENTFD-prctl$PR_SCHED_CORE-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-fsopen-fsconfig$FSCONFIG_CMD_CREATE-socket$inet6_udp-socket$nl_generic-syz_genetlink_get_family_id$l2tp-socket$nl_route-sendmsg$nl_route-fsmount-fchdir-symlink-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x2, r3}) r4 = eventfd(0xffffffff) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000240)={0x2, r4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000ffff23bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14000400011a04001c00128009000100626f6e64000000000c0002800800aba772bd0000"], 0x3c}, 0x1, 0x0, 0x0, 0xc0814}, 0x20040040) r9 = fsmount(r7, 0x0, 0x80) fchdir(r9) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program crashed: WARNING in dev_shutdown testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO-socket$inet6_udp-openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-eventfd-ioctl$KVM_HYPERV_EVENTFD-prctl$PR_SCHED_CORE-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-fsopen-fsconfig$FSCONFIG_CMD_CREATE-socket$inet6_udp-socket$nl_generic-syz_genetlink_get_family_id$l2tp-socket$nl_route-sendmsg$nl_route-fsmount-fchdir-symlink-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x2, r3}) r4 = eventfd(0xffffffff) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000240)={0x2, r4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000ffff23bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14000400011a04001c00128009000100626f6e64000000000c0002800800aba772bd0000"], 0x3c}, 0x1, 0x0, 0x0, 0xc0814}, 0x20040040) r9 = fsmount(r7, 0x0, 0x80) fchdir(r9) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO-socket$inet6_udp-openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-eventfd-ioctl$KVM_HYPERV_EVENTFD-prctl$PR_SCHED_CORE-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-fsopen-fsconfig$FSCONFIG_CMD_CREATE-socket$inet6_udp-socket$nl_generic-syz_genetlink_get_family_id$l2tp-socket$nl_route-sendmsg$nl_route-fsmount-fchdir-symlink-syz_io_uring_setup-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x2, r3}) r4 = eventfd(0xffffffff) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000240)={0x2, r4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000ffff23bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14000400011a04001c00128009000100626f6e64000000000c0002800800aba772bd0000"], 0x3c}, 0x1, 0x0, 0x0, 0xc0814}, 0x20040040) r9 = fsmount(r7, 0x0, 0x80) fchdir(r9) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program crashed: WARNING in dev_shutdown testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO-socket$inet6_udp-openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-eventfd-ioctl$KVM_HYPERV_EVENTFD-prctl$PR_SCHED_CORE-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-fsopen-fsconfig$FSCONFIG_CMD_CREATE-socket$inet6_udp-socket$nl_generic-syz_genetlink_get_family_id$l2tp-socket$nl_route-sendmsg$nl_route-fsmount-fchdir-symlink-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x2, r3}) r4 = eventfd(0xffffffff) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000240)={0x2, r4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000ffff23bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14000400011a04001c00128009000100626f6e64000000000c0002800800aba772bd0000"], 0x3c}, 0x1, 0x0, 0x0, 0xc0814}, 0x20040040) r9 = fsmount(r7, 0x0, 0x80) fchdir(r9) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program crashed: WARNING in dev_shutdown testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO-socket$inet6_udp-openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-eventfd-ioctl$KVM_HYPERV_EVENTFD-prctl$PR_SCHED_CORE-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-fsopen-fsconfig$FSCONFIG_CMD_CREATE-socket$inet6_udp-socket$nl_generic-syz_genetlink_get_family_id$l2tp-socket$nl_route-sendmsg$nl_route-fsmount-fchdir-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x2, r3}) r4 = eventfd(0xffffffff) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000240)={0x2, r4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000ffff23bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14000400011a04001c00128009000100626f6e64000000000c0002800800aba772bd0000"], 0x3c}, 0x1, 0x0, 0x0, 0xc0814}, 0x20040040) r9 = fsmount(r7, 0x0, 0x80) fchdir(r9) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program crashed: WARNING in dev_shutdown testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO-socket$inet6_udp-openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-eventfd-ioctl$KVM_HYPERV_EVENTFD-prctl$PR_SCHED_CORE-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-fsopen-fsconfig$FSCONFIG_CMD_CREATE-socket$inet6_udp-socket$nl_generic-syz_genetlink_get_family_id$l2tp-socket$nl_route-sendmsg$nl_route-fsmount-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x2, r3}) r4 = eventfd(0xffffffff) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000240)={0x2, r4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000ffff23bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14000400011a04001c00128009000100626f6e64000000000c0002800800aba772bd0000"], 0x3c}, 0x1, 0x0, 0x0, 0xc0814}, 0x20040040) fsmount(r7, 0x0, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program crashed: WARNING in dev_shutdown testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO-socket$inet6_udp-openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-eventfd-ioctl$KVM_HYPERV_EVENTFD-prctl$PR_SCHED_CORE-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-fsopen-fsconfig$FSCONFIG_CMD_CREATE-socket$inet6_udp-socket$nl_generic-syz_genetlink_get_family_id$l2tp-socket$nl_route-sendmsg$nl_route-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x2, r3}) r4 = eventfd(0xffffffff) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000240)={0x2, r4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000ffff23bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14000400011a04001c00128009000100626f6e64000000000c0002800800aba772bd0000"], 0x3c}, 0x1, 0x0, 0x0, 0xc0814}, 0x20040040) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program crashed: WARNING in dev_shutdown testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO-socket$inet6_udp-openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-eventfd-ioctl$KVM_HYPERV_EVENTFD-prctl$PR_SCHED_CORE-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-fsopen-fsconfig$FSCONFIG_CMD_CREATE-socket$inet6_udp-socket$nl_generic-syz_genetlink_get_family_id$l2tp-socket$nl_route-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x2, r3}) r4 = eventfd(0xffffffff) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000240)={0x2, r4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program crashed: WARNING in dev_shutdown testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO-socket$inet6_udp-openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-eventfd-ioctl$KVM_HYPERV_EVENTFD-prctl$PR_SCHED_CORE-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-fsopen-fsconfig$FSCONFIG_CMD_CREATE-socket$inet6_udp-socket$nl_generic-syz_genetlink_get_family_id$l2tp-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x2, r3}) r4 = eventfd(0xffffffff) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000240)={0x2, r4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program crashed: WARNING in dev_shutdown testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO-socket$inet6_udp-openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-eventfd-ioctl$KVM_HYPERV_EVENTFD-prctl$PR_SCHED_CORE-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-fsopen-fsconfig$FSCONFIG_CMD_CREATE-socket$inet6_udp-socket$nl_generic-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x2, r3}) r4 = eventfd(0xffffffff) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000240)={0x2, r4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program crashed: WARNING in dev_shutdown testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO-socket$inet6_udp-openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-eventfd-ioctl$KVM_HYPERV_EVENTFD-prctl$PR_SCHED_CORE-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-fsopen-fsconfig$FSCONFIG_CMD_CREATE-socket$inet6_udp-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x2, r3}) r4 = eventfd(0xffffffff) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000240)={0x2, r4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program crashed: WARNING in dev_shutdown testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO-socket$inet6_udp-openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-eventfd-ioctl$KVM_HYPERV_EVENTFD-prctl$PR_SCHED_CORE-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-fsopen-fsconfig$FSCONFIG_CMD_CREATE-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x2, r3}) r4 = eventfd(0xffffffff) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000240)={0x2, r4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program crashed: WARNING in dev_shutdown testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO-socket$inet6_udp-openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-eventfd-ioctl$KVM_HYPERV_EVENTFD-prctl$PR_SCHED_CORE-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-fsopen-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x2, r3}) r4 = eventfd(0xffffffff) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000240)={0x2, r4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program crashed: WARNING in dev_shutdown testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO-socket$inet6_udp-openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-eventfd-ioctl$KVM_HYPERV_EVENTFD-prctl$PR_SCHED_CORE-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x2, r3}) r4 = eventfd(0xffffffff) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000240)={0x2, r4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program crashed: WARNING in dev_shutdown testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO-socket$inet6_udp-openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-eventfd-ioctl$KVM_HYPERV_EVENTFD-prctl$PR_SCHED_CORE-socketpair$unix-connect$unix-sendmmsg$unix-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x2, r3}) r4 = eventfd(0xffffffff) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000240)={0x2, r4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program crashed: WARNING in dev_shutdown testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO-socket$inet6_udp-openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-eventfd-ioctl$KVM_HYPERV_EVENTFD-prctl$PR_SCHED_CORE-socketpair$unix-connect$unix-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x2, r3}) r4 = eventfd(0xffffffff) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000240)={0x2, r4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program crashed: WARNING in dev_shutdown testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO-socket$inet6_udp-openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-eventfd-ioctl$KVM_HYPERV_EVENTFD-prctl$PR_SCHED_CORE-socketpair$unix-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x2, r3}) r4 = eventfd(0xffffffff) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000240)={0x2, r4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program crashed: WARNING in dev_shutdown testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO-socket$inet6_udp-openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-eventfd-ioctl$KVM_HYPERV_EVENTFD-prctl$PR_SCHED_CORE-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x2, r3}) r4 = eventfd(0xffffffff) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000240)={0x2, r4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program crashed: WARNING in dev_shutdown testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO-socket$inet6_udp-openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-eventfd-ioctl$KVM_HYPERV_EVENTFD-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x2, r3}) r4 = eventfd(0xffffffff) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000240)={0x2, r4}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program crashed: WARNING in dev_shutdown testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO-socket$inet6_udp-openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-eventfd-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x2, r3}) eventfd(0xffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program crashed: WARNING in dev_shutdown testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO-socket$inet6_udp-openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-ioctl$KVM_HYPERV_EVENTFD-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x2, r3}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program crashed: WARNING in dev_shutdown testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO-socket$inet6_udp-openat$kvm-ioctl$KVM_CREATE_VM-eventfd2-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) eventfd2(0x6, 0x80800) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program crashed: WARNING in dev_shutdown testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO-socket$inet6_udp-openat$kvm-ioctl$KVM_CREATE_VM-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program crashed: WARNING in dev_shutdown testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO-socket$inet6_udp-openat$kvm-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program crashed: WARNING in dev_shutdown testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO-socket$inet6_udp-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program crashed: WARNING in dev_shutdown testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program crashed: WARNING in dev_shutdown testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program crashed: WARNING in dev_shutdown testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_io_uring_submit detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io-syz_io_uring_submit detailed listing: executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) program crashed: WARNING in dev_shutdown extracting C reproducer testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_io_uring_submit program did not crash simplifying guilty program options testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) program crashed: WARNING in dev_shutdown extracting C reproducer testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_io_uring_submit program did not crash testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) program did not crash testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) program crashed: WARNING in dev_shutdown validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) program did not crash validation run: crashed=false testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) program did not crash validation run: crashed=false testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) program crashed: WARNING in dev_shutdown validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_io_uring_submit detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009880a420d00622065a3f010203010902240001000010000904a6000209abe0000905020200020200000905820210000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) program crashed: WARNING in dev_shutdown validation run: crashed=true reproducing took 1h26m18.550163633s repro crashed as (corrupted=false): usb 4-1: USB disconnect, device number 6 net1080 4-1:0.166 usb0: unregister 'net1080' usb-dummy_hcd.3-1, NetChip TurboCONNECT ------------[ cut here ]------------ WARNING: net/sched/sch_generic.c:1496 at dev_shutdown+0x3c1/0x430 net/sched/sch_generic.c:1496, CPU#1: kworker/1:7/6098 Modules linked in: CPU: 1 UID: 0 PID: 6098 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Workqueue: usb_hub_wq hub_event RIP: 0010:dev_shutdown+0x3c1/0x430 net/sched/sch_generic.c:1496 Code: 48 c7 c2 40 2d c7 8c be a3 00 00 00 48 c7 c7 40 32 c7 8c c6 05 1f 30 08 07 01 e8 aa cd 30 f8 e9 8f fd ff ff e8 70 1b 56 f8 90 <0f> 0b 90 e9 5f fe ff ff 4c 89 f7 e8 ef e8 bf f8 e9 6c fc ff ff 4c RSP: 0018:ffffc90003f5f410 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff88802c5444d0 RCX: ffffffff89683b9e RDX: ffff88807a4b4980 RSI: ffffffff8968c850 RDI: ffff88802c5445b0 RBP: ffff88802c544000 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802c544480 R13: ffffed10058a8803 R14: ffff88802c5444c8 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff8881249fd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000040 CR3: 0000000029904000 CR4: 00000000003526f0 Call Trace: unregister_netdevice_many_notify+0xb37/0x2590 net/core/dev.c:12369 unregister_netdevice_many net/core/dev.c:12444 [inline] unregister_netdevice_queue net/core/dev.c:12258 [inline] unregister_netdevice_queue+0x305/0x3c0 net/core/dev.c:12248 unregister_netdevice include/linux/netdevice.h:3405 [inline] unregister_netdev+0x1f/0x60 net/core/dev.c:12462 usbnet_disconnect+0x109/0x510 drivers/net/usb/usbnet.c:1676 usb_unbind_interface+0x1dd/0x9e0 drivers/usb/core/driver.c:458 device_remove drivers/base/dd.c:571 [inline] device_remove+0x125/0x170 drivers/base/dd.c:563 __device_release_driver drivers/base/dd.c:1282 [inline] device_release_driver_internal+0x44b/0x620 drivers/base/dd.c:1305 bus_remove_device+0x22f/0x450 drivers/base/bus.c:616 device_del+0x396/0x9f0 drivers/base/core.c:3878 usb_disable_device+0x355/0x820 drivers/usb/core/message.c:1418 usb_disconnect+0x2e1/0x9e0 drivers/usb/core/hub.c:2345 hub_port_connect drivers/usb/core/hub.c:5407 [inline] hub_port_connect_change drivers/usb/core/hub.c:5707 [inline] port_event drivers/usb/core/hub.c:5871 [inline] hub_event+0x1d84/0x52f0 drivers/usb/core/hub.c:5953 process_one_work+0x9ba/0x1b20 kernel/workqueue.c:3257 process_scheduled_works kernel/workqueue.c:3340 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3421 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 final repro crashed as (corrupted=false): usb 4-1: USB disconnect, device number 6 net1080 4-1:0.166 usb0: unregister 'net1080' usb-dummy_hcd.3-1, NetChip TurboCONNECT ------------[ cut here ]------------ WARNING: net/sched/sch_generic.c:1496 at dev_shutdown+0x3c1/0x430 net/sched/sch_generic.c:1496, CPU#1: kworker/1:7/6098 Modules linked in: CPU: 1 UID: 0 PID: 6098 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Workqueue: usb_hub_wq hub_event RIP: 0010:dev_shutdown+0x3c1/0x430 net/sched/sch_generic.c:1496 Code: 48 c7 c2 40 2d c7 8c be a3 00 00 00 48 c7 c7 40 32 c7 8c c6 05 1f 30 08 07 01 e8 aa cd 30 f8 e9 8f fd ff ff e8 70 1b 56 f8 90 <0f> 0b 90 e9 5f fe ff ff 4c 89 f7 e8 ef e8 bf f8 e9 6c fc ff ff 4c RSP: 0018:ffffc90003f5f410 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff88802c5444d0 RCX: ffffffff89683b9e RDX: ffff88807a4b4980 RSI: ffffffff8968c850 RDI: ffff88802c5445b0 RBP: ffff88802c544000 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802c544480 R13: ffffed10058a8803 R14: ffff88802c5444c8 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff8881249fd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000040 CR3: 0000000029904000 CR4: 00000000003526f0 Call Trace: unregister_netdevice_many_notify+0xb37/0x2590 net/core/dev.c:12369 unregister_netdevice_many net/core/dev.c:12444 [inline] unregister_netdevice_queue net/core/dev.c:12258 [inline] unregister_netdevice_queue+0x305/0x3c0 net/core/dev.c:12248 unregister_netdevice include/linux/netdevice.h:3405 [inline] unregister_netdev+0x1f/0x60 net/core/dev.c:12462 usbnet_disconnect+0x109/0x510 drivers/net/usb/usbnet.c:1676 usb_unbind_interface+0x1dd/0x9e0 drivers/usb/core/driver.c:458 device_remove drivers/base/dd.c:571 [inline] device_remove+0x125/0x170 drivers/base/dd.c:563 __device_release_driver drivers/base/dd.c:1282 [inline] device_release_driver_internal+0x44b/0x620 drivers/base/dd.c:1305 bus_remove_device+0x22f/0x450 drivers/base/bus.c:616 device_del+0x396/0x9f0 drivers/base/core.c:3878 usb_disable_device+0x355/0x820 drivers/usb/core/message.c:1418 usb_disconnect+0x2e1/0x9e0 drivers/usb/core/hub.c:2345 hub_port_connect drivers/usb/core/hub.c:5407 [inline] hub_port_connect_change drivers/usb/core/hub.c:5707 [inline] port_event drivers/usb/core/hub.c:5871 [inline] hub_event+0x1d84/0x52f0 drivers/usb/core/hub.c:5953 process_one_work+0x9ba/0x1b20 kernel/workqueue.c:3257 process_scheduled_works kernel/workqueue.c:3340 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3421 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246