Extracting prog: 1h29m46.715343427s Minimizing prog: 30m12.42939838s Simplifying prog options: 0s Extracting C: 3m5.100326476s Simplifying C: 25m31.895720133s extracting reproducer from 59 programs testing a last program of every proc single: executing 14 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-bind$inet6-connect$inet6-setsockopt$SO_BINDTODEVICE-sendmmsg-mkdir-sync-mount$overlay-openat$kvm-dup-ioctl$KVM_SET_MSRS-mount-syz_genetlink_get_family_id$mptcp detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xd, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) sendmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)="5ff4c2328c1dffea2fe1c181bb2b", 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="59bb7c436077bcd8099c6e2d10b8c6f1d2fbd238491903133c42d47d52", 0x1d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)="83", 0x1}], 0x1}}], 0x3, 0x10048885) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) sync() mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x1000400, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000004503"]) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_add_vcpu$x86-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_TSC_KHZ_cpu-ioctl$KVM_GET_DEBUGREGS-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCVHANGUP-openat$ttyS3-creat-ioctl$KVM_CAP_SYNC_REGS-readv-openat$cgroup_ro-write$cgroup_subtree-mmap-socket$kcm-setsockopt$kcm_KCM_RECV_DISABLE-mount detailed listing: executing program 0: r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x179}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r1, 0xaea2, 0x0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f00000000c0)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x7) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xac) ioctl$KVM_CAP_SYNC_REGS(r0, 0x4068aea3, &(0x7f0000000340)) readv(r3, &(0x7f0000001800)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/207, 0xcf}, {&(0x7f00000014c0)=""/220, 0xdc}, {&(0x7f00000015c0)=""/15, 0xf}, {&(0x7f0000001600)=""/62, 0x3e}, {&(0x7f0000001640)=""/223, 0xdf}, {&(0x7f0000001740)=""/88, 0x58}, {&(0x7f00000017c0)=""/62, 0x3e}], 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000080)=0x8, 0x4) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0xf1cd3e1dfaaaa71a, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$vsock_stream-getsockopt-landlock_create_ruleset-landlock_restrict_self-setresuid-faccessat-madvise-openat$rnullb-openat$uinput-openat$binderfs-ioctl$BINDER_WRITE_READ-write$uinput_user_dev-socketpair$unix-openat$tcp_congestion-fstat-setreuid-mmap detailed listing: executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x2, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) setresuid(0xee01, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x3) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x10) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40046302, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) write$uinput_user_dev(r3, &(0x7f00000004c0)={'syz0\x00', {0x9, 0x2, 0x9, 0x3ff}, 0x4a, [0x0, 0x81, 0x7, 0x200, 0x58a, 0x5, 0x91, 0x9, 0x5, 0x2, 0xf2e7, 0x1, 0x3, 0x0, 0x4, 0xfff, 0xf4, 0xffffffff, 0x2, 0x3ff, 0x3, 0x101, 0x6, 0x80, 0x9, 0x3, 0x8, 0x8, 0xffff, 0x5, 0x6, 0x560, 0x1, 0x5, 0xc00, 0x7, 0x8, 0x10000, 0x6, 0x7, 0x2c7b, 0x0, 0x7, 0x3, 0x4, 0x8000, 0x0, 0xff, 0x100, 0x6, 0xfffffff9, 0x4, 0x1, 0x6, 0x4, 0x6, 0x80, 0xb64, 0x2, 0x91c8, 0x9, 0x6, 0x6, 0x1], [0xffffff80, 0x6, 0x2, 0x80000000, 0x3, 0x7ff, 0x8, 0x101, 0x0, 0x8, 0x4, 0x5, 0x40, 0xb, 0x9, 0x1, 0x4, 0x3, 0x6, 0x0, 0x63, 0x1, 0x800, 0x12, 0x8c5, 0xf, 0x6, 0x8, 0x2, 0x10, 0x5, 0x6, 0x4, 0x6, 0x2, 0x3, 0x8, 0x1, 0x4, 0x3, 0x2d2, 0x40, 0x4, 0x100, 0xde, 0x9, 0x6, 0x4e9, 0x0, 0xfffffffc, 0x80, 0x7f20dd96, 0x4, 0x63b9, 0x100, 0x6, 0x6, 0x7f, 0x0, 0x68, 0xffff72aa, 0x5, 0xffffffff, 0x8001], [0x8, 0x6, 0xe, 0xffffffb6, 0x7, 0x879, 0xc, 0x0, 0xa, 0x3ff, 0xfffffff7, 0x9, 0x1ff, 0x6, 0x1, 0x8, 0xaf5c, 0x6, 0x8, 0xfffffff6, 0x7a, 0x6, 0x7000000, 0x9, 0x3bf99e39, 0x8, 0x10, 0x2, 0x7f, 0x2, 0x1, 0x6, 0xfffffffa, 0x6, 0x3cee, 0x5, 0x2, 0x8a9, 0x8, 0x3, 0x2, 0x1, 0x24d, 0x80000000, 0x40, 0x3, 0x200, 0x10001, 0xe, 0x3, 0x5, 0xffffff7e, 0x5, 0x6, 0x2b7, 0xeaf, 0x4c, 0x2, 0x5, 0x800, 0x0, 0x1, 0x5, 0x7], [0xffff, 0x3, 0x10000, 0x3f9e, 0xe, 0x19, 0x5, 0xe, 0x8, 0x1, 0x8000, 0xba, 0xbba, 0x4, 0x4, 0xd, 0xff, 0x8, 0x303b, 0x7, 0x7, 0x8, 0x6, 0x8, 0x7, 0x3, 0x0, 0xcb, 0xb6, 0x8, 0x60, 0xffff7fff, 0x0, 0xc, 0x401, 0x4, 0x102, 0x1, 0x80000000, 0x4, 0x12c6, 0xd, 0x80000, 0x2, 0x1, 0x8001, 0x3, 0x3, 0x0, 0x7, 0x7fffffff, 0x4, 0x4, 0xf, 0x8, 0x4, 0x101, 0x2, 0xffffffff, 0x4, 0x9, 0x2, 0x61f09ecc, 0xdea9]}, 0x45c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fstat(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$incfs-ioctl$sock_SIOCETHTOOL-getdents-cachestat-mknodat$null-openat$dir-setsockopt$CAN_RAW_JOIN_FILTERS-getsockopt$CAN_RAW_LOOPBACK-msgget$private-msgrcv-syz_init_net_socket$rose-socket$nl_netfilter-sendmmsg$sock-ioctl$AUTOFS_DEV_IOCTL_EXPIRE-sendmsg$IPSET_CMD_RENAME-fspick-ioctl$TIOCGSOFTCAR-socket$pptp-bind$pptp-semget$private-semctl$IPC_INFO-socket$inet6-connect$rose-syz_genetlink_get_family_id$nl80211-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_RESOLVE_ROUTE-syz_open_dev$evdev-ioctl$EVIOCGBITSW-writev-sendmsg$TIPC_NL_BEARER_GET detailed listing: executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x20000, 0x40) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'batadv_slave_1\x00', &(0x7f0000000040)=@ethtool_rxfh={0x47, 0x400, 0x2, 0x8, 0x6, 'q-v', 0x3, [0x2, 0x7, 0xa9, 0x4, 0x3, 0x728, 0x0, 0x20]}}) getdents(r0, &(0x7f00000000c0)=""/235, 0xeb) cachestat(r0, &(0x7f00000001c0)={0x7fff, 0x1}, &(0x7f0000000200), 0x0) mknodat$null(r0, &(0x7f0000000240)='./file0\x00', 0x2, 0x103) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x240, 0x102) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000002c0)=0x1, 0x4) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) r1 = msgget$private(0x0, 0x23) msgrcv(r1, &(0x7f0000000380)={0x0, ""/185}, 0xc1, 0x3, 0x1000) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$sock(r2, &(0x7f00000011c0)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x5e4, @local, 0x24}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)="7b197d6f7853092dcc0a42d1f40865e4a3c0aaeb1e545c417cad65e2537a14d8f50083e1b91ff2de48903f0c9e82a2f737006d47a2667fd12a6dbe702d32cdc1aa942c27316dfcbb0a649989310a10caf404532327e8db4b36591b86d9031bc4c14a6848c13bc3edb05ce3ffcde260a5e88a065c1948a2a2b21ff9d4cf3e5e088439513cb04feed81562ecb677f60b3f9be5af55a3101b0406a634c8e38549cf84d033b8013edbb23d1f8d1dfc7f2bf6131251fd07ce1ab5f3c834a4c3694b28969073f2f79b1c35f12090f9e68a3ca3fbeade789bac45172ad0344d56c4", 0xde}], 0x1, &(0x7f0000000640)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xfe6}}], 0x48}}, {{&(0x7f00000006c0)=@phonet={0x23, 0x7, 0x9, 0x3}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000740)="42c7c73aff7bb1fb972d04ebfdb4949911e2d4e2a7e0e324f797ab024641ee109f51e052409c65fd58b1dbce447331099b4dc9", 0x33}], 0x1, &(0x7f00000007c0)=[@timestamping={{0x14, 0x1, 0x25, 0x400}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000001}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x90}}, {{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x4, 0x2, 0x1, {0xa, 0x4e22, 0x9, @private2, 0x6}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000900)}, {&(0x7f0000000940)="0d47ef03ec7c7536ee", 0x9}, {&(0x7f0000000980)="96678fab33ca2bb9b425ceec3da5ace35e937601429867d6f01cce069b4c34553d7feb7588a458fdc8145e36520ce4f812fec44bf3312ce9fe846a8e6a166c5759a4ac7967683a01518ebbc429177abc8c60f9b231022019987dd6c7902c70256e06acc77556a23ca496cd85a2946b51aa", 0x71}, {&(0x7f0000000a00)="b6b3dd76a0b7241a6db5179678b73b2a672ff5128ee74ba197f785a38979f5dc7120b4beb29a88178b128474e4a4e42fff7584fdce62583d935a06ea41d1e17cce67ea16bd1c76ad8b5df1bdba139ddc7e57942138b9cf79c8", 0x59}], 0x4, &(0x7f0000000ac0)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x58b}}, @mark={{0x14, 0x1, 0x24, 0xc}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}], 0xf0}}, {{&(0x7f0000000bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x4, 0x1, {0xa, 0x4e20, 0x8, @local, 0x8}}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000c40)="3d01b1b9313c6ccc46c8aa76e6c1a9f8935f4e14a38cc39344cc6d85c004bd1b7d2bb6aa0b70cd62ac626246ffff9352b1f99e26820f6931e7ab9522df0cb61ea71da3a0d0302f5e0bf196e85247adb5ba8a68b6a7bdafd3d797e398970d997b00ffd95358288d551b45c73cacdee3aab0711c2bd34d56f128f418cd16b3895cb18be1ad691ebcee7a6d910f9b65dd79e454edd3138813edfa6cc491e4a8eab16e5c10a76785735195308b97b4e0cfa7df26b8b0a9771542b67427bcc2a062e50a33980fda7839ccc8447bed5d73a84f39", 0xd1}, {&(0x7f0000000d40)="0efe35806c3cfbeb133a85c09d205d70fb9c47f4acab7883d7810a575cf1ab87476b9a5bf860652265b65bbefcdad209d717c58343e964c95a50d4efc140ee2d2f672a4253b75f110591f574244d1374e28fc9683f282b00fcc2475582531cd378120b199702a0e131758737aaafc2b384b8627515dfbe93e62a00e74a911b270b5e9a45cb624a3b95cbaf15f0bcdcf7726be7c64d942343924a3f9b9b1a98", 0x9f}, {&(0x7f0000000e00)="b9bac540b4cde97354394ded15b2f958f0ea5d799ed72d6f6a3c39272b98d283", 0x20}, {&(0x7f0000000e40)="10e6494ac5cc", 0x6}, {&(0x7f0000000e80)="e2d41eb51f0b729df53d86c01a0b662d0fab307e1185d50915307ce3e0452cdcf41a08e60a6f49a1b6f99e3f6fcacf20f0b486880397bd85ff8e8b3af2ffe45b99fb6e88c797a9af5772aaf77e4619e3acb71455e48ad44fe66618d9dd7b2b24d5e24bb003d8f4a59b4082454d91e580251342f39ffd5075bed42fed5efdfb728e43f266d9dc068b85d978631f89e43791cef6cac4a8b19e2b82684202e8f66e635e2bf769953ee2baca1894e11c1b9d923a1d86ffd086007e055a8efc3de8fc4b4d64772be00e75d931fc3ec442743ed17f8335ff2b93bb19e4484f65bcc752c5a4c6f883661d2786b4cd7cc50633ec1398c2628ad796", 0xf7}, {&(0x7f0000000f80)="e4e38d125addc8fbc801e297639cf93990f87b8797d6ad8991cd88f7a256368d4b203b1a0b3f8167d3bdd42cca9d46c10f5f8e91b64807c7685ed83263616eccad279b2055b0ce5ad343777d054f949bf469b3d753d12eac838275c1046d403b1b95a9eca32a8a133c87a679bb5fe79a47e781bca1e3d57e5961f2b94d", 0x7d}, {&(0x7f0000001000)="e0e52a57c57e90008b7cc06742cc621c47d73d975e3d119c4228e6451802769814fd23bca941a88d6a3dbf715429220303739a5fd9a2f6aacac55362f5a30420817352ddf6eda66a52e20942baebcad8552f7ebe7ed7297ab48eba7e986d", 0x5e}], 0x7, &(0x7f0000001100)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x8001}}, @mark={{0x14, 0x1, 0x24, 0xc}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x6a}}], 0xc0}}], 0x4, 0x4008800) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x3c, 0x5, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}}, 0x4) r5 = fspick(r0, &(0x7f0000001400)='./file0\x00', 0x0) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000001440)) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000001480)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) r7 = semget$private(0x0, 0x2, 0x601) semctl$IPC_INFO(r7, 0x4, 0x3, &(0x7f00000014c0)=""/205) socket$inet6(0xa, 0xa, 0xffff) connect$rose(r2, &(0x7f00000015c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @bcast}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), r0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000001680)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001640)={0xffffffffffffffff}, 0x106, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f00000016c0)={0x4, 0x8, 0xfa00, {r8, 0xcc06}}, 0x10) r9 = syz_open_dev$evdev(&(0x7f0000001700), 0x3, 0x725081) ioctl$EVIOCGBITSW(r9, 0x80404525, &(0x7f0000001740)=""/55) writev(r5, &(0x7f0000001840)=[{&(0x7f0000001780)="1aa978667ad71ac9929fc20cb9e3f5a15d653c3d96349dc9d0c128387005aa4610065a010c19cc81dd4f57091129f321a4bc0399cbc4fd36aa90b73a7ee7672a69364489c884f3a7d5d7215e9e8fa8582ddda34d86ea626aefc46d8f25cab6ee1d8d641e5923261b9507d0044b8bb742a85d45c7d383c380b65cfd659f24d8c9afc1e73e454a7800824597f207523e4e1e0b1688825df402430a96", 0x9b}], 0x1) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000001c00)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001900)={0x2a8, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa6bb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe2}]}, @TIPC_NLA_SOCK={0xa4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x972a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd5, 0x3, "88f0f9c2c1c1469fe6dc15059834b5e65d62ff292015e822cd60b93202da830b73d0d8a926aabe3994c5852233e391ef60a9299268c842d160f553d1196028acc56732ca54fe9ec759816d2a096ae408cb1cd934c4ad5ae05bbec5165fe42f9f35c75f9e32f5de9df638fd668e36a24c012fcda3a968bf0f36daafc8bfd656036010d8e68a8fb066a95a2567f09ce523ef861bddbc11fb6d0803013d97cdeab4b5f6a3f2fb26c2e683965166ef2c1b74c4739d87e1572c3e9f6830c58974256e18396094013e784b8e64a6ff73506c78b5"}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x25}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x40088d5) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-socket$nl_generic-mmap-mremap-syz_clone-mmap-syz_open_dev$char_usb-openat$pfkey detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x10, r1, 0xfffff000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x200800, &(0x7f0000000080)="7f593f52f82c40cce97b14454d1bc7af21f23c71fa", 0x15, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8296632bbac009c8c0a82746562ae178b96c50f0433d33d0b55bf51010c8726a65a82e4bb6da4a5178287bcc62e876ddbd7ea68498e2eb795437dc8a5d122c0e7612f3d214b80b1580cf1ad96a5096a19da83bf85cdeeab2108966ef35d10cdd6bab8317e81a2486c6ca246a3d9bbeea3c1048bf578ecb92864257f8d2164154b6ffa5e6eeee8bb3884724b25688d9d9fa1e98cf6977e0af2ecb78df02df16eed2232867a8a28128ff5095e5bf01d1") mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) syz_open_dev$char_usb(0xc, 0xb4, 0x6) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-socket$nl_generic-mmap-mremap-syz_clone-mmap-syz_open_dev$char_usb-openat$pfkey detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x10, r1, 0xfffff000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x200800, &(0x7f0000000080)="7f593f52f82c40cce97b14454d1bc7af21f23c71fa", 0x15, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8296632bbac009c8c0a82746562ae178b96c50f0433d33d0b55bf51010c8726a65a82e4bb6da4a5178287bcc62e876ddbd7ea68498e2eb795437dc8a5d122c0e7612f3d214b80b1580cf1ad96a5096a19da83bf85cdeeab2108966ef35d10cdd6bab8317e81a2486c6ca246a3d9bbeea3c1048bf578ecb92864257f8d2164154b6ffa5e6eeee8bb3884724b25688d9d9fa1e98cf6977e0af2ecb78df02df16eed2232867a8a28128ff5095e5bf01d1") mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) syz_open_dev$char_usb(0xc, 0xb4, 0x6) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fsopen-fsconfig$FSCONFIG_SET_STRING-openat$rnullb-sendfile-ioprio_set$pid detailed listing: executing program 0: r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x142, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) ioprio_set$pid(0x2, 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fsopen-fsconfig$FSCONFIG_SET_STRING-openat$rnullb-sendfile-ioprio_set$pid detailed listing: executing program 0: r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x142, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) ioprio_set$pid(0x2, 0x0, 0x0) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndseq-write$sndseq-readv-creat-mount-memfd_create detailed listing: executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r0, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/250, 0xfa}], 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x12c) (async) mount(&(0x7f0000001400)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000080)='jffs2\x00', 0x8002, 0x0) memfd_create(&(0x7f0000000040)='/dev/rnullb0\x00', 0x7) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndseq-write$sndseq-readv-creat-mount-memfd_create detailed listing: executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r0, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/250, 0xfa}], 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x12c) (async) mount(&(0x7f0000001400)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000080)='jffs2\x00', 0x8002, 0x0) memfd_create(&(0x7f0000000040)='/dev/rnullb0\x00', 0x7) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open-syz_usb_connect-socket-getsockopt-syz_clone3-ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF-creat-mount detailed listing: executing program 0: r0 = open(&(0x7f00000001c0)='./cgroup\x00', 0x200c01, 0x157) syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000056544820e1050804112501020301090224000100000000090400"], 0x0) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x271b, 0x0, &(0x7f0000000000)=0xfffffffffffffce5) syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000000)={{@any, 0x80000001}, 0x4f2f, 0x9, 0x401, 0x8, 0x7f, 0x80000001, 0x0, 0x1}) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open-syz_usb_connect-socket-getsockopt-syz_clone3-ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF-creat-mount detailed listing: executing program 0: r0 = open(&(0x7f00000001c0)='./cgroup\x00', 0x200c01, 0x157) syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000056544820e1050804112501020301090224000100000000090400"], 0x0) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x271b, 0x0, &(0x7f0000000000)=0xfffffffffffffce5) syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000000)={{@any, 0x80000001}, 0x4f2f, 0x9, 0x401, 0x8, 0x7f, 0x80000001, 0x0, 0x1}) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-fadvise64-mmap-setsockopt$netlink_NETLINK_BROADCAST_ERROR detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x20010, r0, 0x93771000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000040)=0x8, 0x4) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-fadvise64-mmap-setsockopt$netlink_NETLINK_BROADCAST_ERROR detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x20010, r0, 0x93771000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000040)=0x8, 0x4) program did not crash single: failed to extract reproducer bisect: bisecting 59 programs with base timeout 30s testing program (duration=44s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [28, 5, 4, 28, 6, 4, 4, 6, 7, 6, 16, 17, 8, 8, 23, 8, 11, 16, 4, 6, 6, 30, 5, 4, 20, 5, 5, 5, 9, 11, 13, 20, 10, 8, 8, 12, 21, 40, 11, 10, 4, 30, 18, 5, 14, 16, 10, 13, 11, 10, 12, 9, 30, 30, 5, 6, 17, 17, 13] detailed listing: executing program 1: syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000001c0)=0x1fff) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000380)={"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"}) (async) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000380)={"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"}) setuid(0xee00) (async) setuid(0xee00) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000040), 0x4) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x6000, 0x3, 0x0, 0xeffffdff, 0x0, [{0x2, 0x0, 0xfc, '\x00', 0xfb}, {0x3, 0x9, 0x82, '\x00', 0x7c}, {0xfc, 0x12, 0x4, '\x00', 0xb9}, {0x11, 0xb, 0x0, '\x00', 0x7d}, {0xfe, 0x9, 0x81}, {0x0, 0x0, 0xfe, '\x00', 0x2}, {0xfd, 0x0, 0x6}, {0x0, 0xfa}, {0x1, 0x8f, 0x40, '\x00', 0x4}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0xb}, {0x5, 0x99, 0x2, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0x2, 0x2, 0x6}, {0xc3, 0x0, 0x0, '\x00', 0x49}, {0x0, 0x21, 0x80, '\x00', 0x5}, {0x3}, {0x0, 0x2, 0x5, '\x00', 0x10}, {0x48, 0x0, 0xd}, {0x0, 0x80}, {0x0, 0x2, 0x0, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x4, 0x9}, {0x7f, 0xff, 0x3, '\x00', 0x7}]}}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x0, 0x1, 0x2}, 0x18, 0x3) ioctl$int_in(r6, 0x5452, &(0x7f0000000800)=0x2) r7 = dup(r6) recvmsg$unix(r7, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x100) (async) recvmsg$unix(r7, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x100) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0x268020, 0x0) (async) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0x268020, 0x0) executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) write$UHID_INPUT(r0, &(0x7f0000000040)={0x8, {"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", 0x1000}}, 0x1006) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0x5, 0x4) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="08009e0080"], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000) executing program 1: r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYRES32=r0], 0x10b8}, 0x20000b4c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000200)='./file0/file0\x00') r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x227a, &(0x7f0000000040)) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r4, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x41) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x3, 0x8, 0x6, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000540)={r7, r8, 0x4, 0x0, 0x4}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="4b9d2043623ec8cdf69e7d27beabd13ba97646305134e1c2b946f17064a23ff5db08b34c2bcaf166564f68fb03e804547f7ed5ed5e28a0ce93313e1d75bfbeba494652061bea5f5263872c5b98efbabcb16e82802ae7245e6364cc0b8256c778d3b93d112f51dd80a9dc9070aee25524dcbd3d6011ab46e52b3be84b78098e6096ad2663e2b12bbd4ecd8247d4f0d6bb7ac7a7d47cfad90cd0baa72379c368b101b20e619cf82037b032a9dae33047d08bb11b9e0af2d0b45327c4188c827ff1fb50ff304916a94e4d40a67a9f0fd9797b93d3a2a955", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x8003}, 0x8) r10 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0xa800) r11 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r12) fchownat(r10, &(0x7f0000000280)='./file0/file0\x00', 0xffffffffffffffff, r12, 0x1000) close(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x93771000) executing program 1: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000ac9000/0x3000)=nil, 0x3000, 0x3000001, 0x20011, r0, 0xf6489000) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000180)={0x1f, @none, 0x15}, 0xa) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a700000000000905", @ANYRES32], 0x0) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @any, 0x31}, 0xa) executing program 1: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x20010, r0, 0x93771000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000040)=0x8, 0x4) executing program 32: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x20010, r0, 0x93771000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000040)=0x8, 0x4) executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, 0xfffffffffffffffe) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x400448dd, 0xfffffffffffffffe) (async) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) (async) executing program 4: syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905"], 0x0) (async) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000209000b0073797a31000000000900010073797a300000000008000a4000000004"], 0x250}}, 0x0) (async) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x3) (async) mount(&(0x7f0000001400)=@loop={'/dev/loop', 0x0}, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) executing program 4: munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x1}) mount(&(0x7f0000000080)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x228002, 0x0) executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000020c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) setpgid(r2, r2) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_REQBUFS(r3, 0xc0585609, &(0x7f0000000280)={0x20, 0xa}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10000, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) executing program 4: syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x541b, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x601c2, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x601c2, 0x0) ftruncate(r1, 0x8800000) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) migrate_pages(r3, 0x3, &(0x7f0000000200)=0xffffffffffffff0a, &(0x7f0000000240)=0xfffffffffffff69c) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000280)=0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, @llc={0x1a, 0x5, 0x6, 0x6, 0x6, 0x81, @broadcast}, @nfc={0x27, r4, 0x1, 0x3}, @tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x2}, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0xf01, &(0x7f00000002c0)='dvmrp1\x00', 0x595a, 0xd}) (async) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, @llc={0x1a, 0x5, 0x6, 0x6, 0x6, 0x81, @broadcast}, @nfc={0x27, r4, 0x1, 0x3}, @tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x2}, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0xf01, &(0x7f00000002c0)='dvmrp1\x00', 0x595a, 0xd}) sendfile(r2, r1, 0x0, 0x578410e9) r5 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000140)=0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, {0x6}}, './cgroup\x00'}) executing program 4: r0 = open(&(0x7f00000001c0)='./cgroup\x00', 0x200c01, 0x157) syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000056544820e1050804112501020301090224000100000000090400"], 0x0) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x271b, 0x0, &(0x7f0000000000)=0xfffffffffffffce5) syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000000)={{@any, 0x80000001}, 0x4f2f, 0x9, 0x401, 0x8, 0x7f, 0x80000001, 0x0, 0x1}) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) executing program 33: r0 = open(&(0x7f00000001c0)='./cgroup\x00', 0x200c01, 0x157) syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000056544820e1050804112501020301090224000100000000090400"], 0x0) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x271b, 0x0, &(0x7f0000000000)=0xfffffffffffffce5) syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000000)={{@any, 0x80000001}, 0x4f2f, 0x9, 0x401, 0x8, 0x7f, 0x80000001, 0x0, 0x1}) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000000)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/172, 0xac}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/141, 0x8d}, {&(0x7f0000001300)=""/203, 0xcb}, {&(0x7f00000000c0)=""/116, 0x74}], 0x5, &(0x7f0000001480)=""/198, 0xc6}, 0x9}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/34, 0x22}, {&(0x7f00000025c0)=""/109, 0x6d}, {&(0x7f0000002640)=""/226, 0xe2}, {&(0x7f0000002740)=""/145, 0x91}, {&(0x7f0000002800)=""/91, 0x5b}], 0x6, &(0x7f0000002900)=""/56, 0x38}, 0x10}, {{&(0x7f0000002940)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002d80)=[{&(0x7f00000029c0)=""/25, 0x19}, {&(0x7f0000002a00)=""/38, 0x26}, {&(0x7f0000002a40)=""/165, 0xa5}, {&(0x7f0000002b00)=""/201, 0xc9}, {&(0x7f0000002c00)=""/79, 0x4f}, {&(0x7f0000002c80)=""/156, 0x9c}, {&(0x7f0000002d40)=""/12, 0xc}], 0x7, &(0x7f0000002e00)=""/74, 0x4a}, 0x1}, {{&(0x7f0000002e80)=@generic, 0x80, &(0x7f0000003f40)=[{&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000003f00)=""/23, 0x17}], 0x2, &(0x7f0000003f80)=""/135, 0x87}}, {{&(0x7f0000004040)=@isdn, 0x80, &(0x7f0000004340)=[{&(0x7f00000040c0)=""/147, 0x93}, {&(0x7f0000004180)=""/133, 0x85}, {&(0x7f0000004240)=""/251, 0xfb}], 0x3, &(0x7f0000004380)=""/63, 0x3f}, 0x5}, {{&(0x7f00000043c0)=@nfc, 0x80, &(0x7f0000004640)=[{&(0x7f0000004440)=""/233, 0xe9}, {&(0x7f0000004540)=""/215, 0xd7}], 0x2, &(0x7f0000004680)=""/4096, 0x1000}, 0x3}], 0x6, 0x40000020, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r2, &(0x7f0000005880)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000540500000e0002006e657464657673696d0000000f0002"], 0x34}}, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x112) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010023010000fcdbdf250200000008000100", @ANYRES32=r6, @ANYBLOB="96eeb28f64d988341a545a6b222d93b70c052ca07b2da2944f0f1887bebc9971aeab79d933cd75a4648f2d2d2782a20f2f9f21bbedacd396b1b4820503f9f7e34e6efef17fe107db0e06c68a320c2816125ed23fc47e9e"], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) write$nci(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="c0010421f9252ea3"], 0x8) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) ioctl$BLKFRASET(r9, 0x1264, &(0x7f0000000080)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r9, 0x5708e000) executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x138) (async) mount(&(0x7f0000001400)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) executing program 3: mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='bfs\x00', 0x200000, 0x0) chdir(&(0x7f0000000080)='./cgroup/file0\x00') close(0xffffffffffffffff) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/157, 0x9d}], 0x1}, 0x10060) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000000)={0x67, 0x0, 0x4, 0x2000, &(0x7f0000b2c000/0x2000)=nil}) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="00a2a4b585b2f8660ebd0230bcea44ff7dbd0b342790b332d8c143e800"/43], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@newchain={0x3c, 0x64, 0x300, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1f, 0x4}, {0xd, 0x9}, {0xffe0, 0x10}}, [@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1ff}]}}]}, 0x3c}}, 0x4004055) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x13) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r1, &(0x7f0000001380)=[{&(0x7f0000000080)=""/230, 0xe6}, {0x0}], 0x2) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x13) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) readv(r1, &(0x7f0000001380)=[{&(0x7f0000000080)=""/230, 0xe6}, {0x0}], 0x2) (async) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0) (async) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="08009e0080"], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000) (fail_nth: 3) executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r0, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/250, 0xfa}], 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x12c) (async) mount(&(0x7f0000001400)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000080)='jffs2\x00', 0x8002, 0x0) memfd_create(&(0x7f0000000040)='/dev/rnullb0\x00', 0x7) executing program 34: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r0, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/250, 0xfa}], 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x12c) (async) mount(&(0x7f0000001400)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000080)='jffs2\x00', 0x8002, 0x0) memfd_create(&(0x7f0000000040)='/dev/rnullb0\x00', 0x7) executing program 6: newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r0, r0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0xa000, 0x223) openat$cgroup_subtree(r1, &(0x7f0000000000), 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000002) read$FUSE(r3, &(0x7f00000048c0)={0x2020}, 0x2020) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000200)={0x18, r4, 0x1, 0x0, &(0x7f00000001c0)=[{0x0, 0x3ea4}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x6, r4, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x3ea4}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) r5 = shmget$private(0x0, 0x11000, 0x0, &(0x7f0000fec000/0x11000)=nil) shmat(r5, &(0x7f0000fed000/0x4000)=nil, 0x7000) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f00000024c0), 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x9}, &(0x7f0000000040)=0x8) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100), 0x10) ioctl$KVM_SET_PIT(r8, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x4003, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}) capset(&(0x7f0000001680)={0x20071026}, &(0x7f0000000180)={0x7, 0x7, 0x7, 0x10001, 0xf}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r6, 0x7ac, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) executing program 6: socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x4a) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) executing program 6: syz_open_dev$dri(0x0, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) (fail_nth: 6) executing program 6: r0 = socket$can_j1939(0x1d, 0x2, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0/../file0\x00', &(0x7f0000000300)={0x410102, 0x0, 0x10}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000002c80)={0x2020}, 0x2020) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000180)) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r4, 0x2, {0x2, 0xff, 0x3}, 0xff}, 0x18) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x60, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb24}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x41) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) executing program 6: socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x4a) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) executing program 6: r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x142, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) ioprio_set$pid(0x2, 0x0, 0x0) executing program 35: r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x142, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) ioprio_set$pid(0x2, 0x0, 0x0) executing program 5: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x2}, 0x8) set_mempolicy(0x3, &(0x7f0000000200)=0x6, 0x5) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000001080)="2b97", 0x2}], 0x3, 0x0, 0xfffffffe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) executing program 5: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x501e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xc3a51000) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x2, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) timer_create(0x6, &(0x7f0000000140)={0x0, 0x2, 0x0, @thr={&(0x7f0000000080)="ff5144c5d0c054a4fc6c400ce03a8bc563f5b19b479f0c75582b47a22e1e0765a2ba891423b77b94c99fb6a869857dd8f7ded032a8256868a4a8a7f3ce557ddfd6c530e4c843441d4612b30139565de870a8924128f420b21e1f2a5e01d0e5c3f8330a14690bbfec10bf22fd6105b5b5a2137475d2566d685dd3660dbfd21507c95af74ebda65264df1472d78a26a9127fc6b9c963fdba", &(0x7f0000000000)="bb470bca9d2bf74191c4b8d5f3a23f0ddde01b501cb4dbbb2ad9f7e13375034401277a1ca9e291b8932267535dbd8490"}}, &(0x7f0000000180)=0x0) timer_getoverrun(r2) executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) listen(r0, 0x0) (async, rerun: 32) creat(&(0x7f00000000c0)='./file0\x00', 0x12c) (rerun: 32) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x2000c050) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r1, 0x89f1, &(0x7f0000000000)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="edff28bd7000fedbdf2513010000000800037c455019d91d4d93f55a0cfa1a2f02e334dc32951fac64c7cb407fd5e47abacc7cb78cc0fafd55fdfd8962b3b466889edd35ca60a99fd14f74b04f5c31efefcf98e4ef842405f732dedc0cf1297083140f2e890aed80230f59df08b0c013d282d06f033a53b6a770fadb19af67eb34e71e27ea7dcd9b11dea328e080f9fb00c1bfbdbe924f6507601e743599d6711b45866cc4a00127ccc9fca084943e3745842836323de58af9ee4c6b2ba489de62c8d3997335ca9422289e2744663599800223c8c060ffb52ca43d5e8be8152ab5a1f441a19ec73d68562fea96a51d4e55283b523476", @ANYRES32=r4, @ANYBLOB="040013000a000600ffffffffffff00000800bd00008000000600b500670600000500e40001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x814) (async) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='rootfs\x00', 0x8002, 0x0) executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c0800034000000004cbbdaeb00a0001006c696d69740000001c0002800c00014000000000000000640c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) r1 = memfd_create(&(0x7f0000000ac0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x01\x00\x00\x00#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x00'/137, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_usb_connect(0x3, 0x4e0, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xfc, 0xde, 0x6f, 0xff, 0x19d2, 0x1267, 0x686f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4ce, 0x1, 0x7, 0xa7, 0x60, 0xf9, [{{0x9, 0x4, 0x40, 0x2, 0x9, 0xff, 0xff, 0xff, 0xa, [@generic={0xe2, 0x21, "0c4bf3fc8e73f2fbc1870eda53474447b194dd10866558d303045f40d453d87f3dbbd658859b86ed4db46613b02627ab94df20d76eea19db3db0c42531f29f93d0a128b2bc610d41db96c76ef1199254f3a764c3f504898c5de03acdffe967380b6c77690a1db5fc656e66b7c409f55b2f4aa5303ffd018fd67d0f039132a27ce622aa5a9e9aaa4c89a9dd450ab8c05d13585aa462a373d9573d356d1a7c4fbaa72019ccdefb997fe071eda3eb2aeef0d4545d192cce927436f39e57959dc4682e82e7d0af463667bb8ab82e9a50a7a3920f4e845d16c0c2b5b95777ae973800"}], [{{0x9, 0x5, 0x3, 0x10, 0x10, 0x8, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x47, 0x7}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0xa, 0x0, 0x81, [@generic={0x62, 0x22, "7b06d582cbc6b9bbba71340adf799dcd42253147bf3e3ca73a0e3ec31ff58a4bf6c03b549095a109433c93fefd769a61ea3659280adba6cf49d3b9960fba38c75c7b215fce5272e63d3cb7f0ecf59427a1e5287dffdab96202f4138209127277"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x2}]}}, {{0x9, 0x5, 0x0, 0xc, 0x8, 0x9, 0x5, 0x2, [@generic={0x93, 0xc29a6c33c9272b2d, "546d8443e3cfb2c314f20d980bf4416bc7dd76ddd89d12cffc49f6caf5a8316b5e006fc606bc16cf939d1c396f09acce96562c1dd11783c2cdd40ae68ccc23f943e09c74c704e435f0a53dda51c7518e0e08c0445a123417518c63709da5a149fa56f266e6a3b58eb44dc7368ddbb0b2de8981145fc9acb0fe698b716ec29eee737977c85c90a61901000223c8e7f0ff03"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x20, 0xff, 0x41, 0x6}}, {{0x9, 0x5, 0x3, 0xc, 0x10, 0x3, 0x2, 0x0, [@generic={0x71, 0x4, "2c39e9c95f5d10b095a5096e79f1f0da241dc5438ec1970e2ff976c62169bbca6acafd6e34c0d524cedee08cd0419843c746db80183dcd3f64adb5b925c02066615d574fc640fef9eb3aca1f53c15e39f175a5baa413ac6c58064abc57da5c15cdbde7a789451e1274789cf5da5181"}]}}, {{0x9, 0x5, 0xc, 0x32, 0x200, 0x6, 0x9, 0x5e, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x29, 0x4db}]}}, {{0x9, 0x5, 0x3, 0xc, 0x0, 0x2, 0x80, 0x5, [@generic={0xf4, 0xa17a91a0f607cf92, "a6f267014eac54464a1765fd91ac46babf49f2a1ab20227fe0f8fffeac9b10d8f27d2dbde2760247f47414b108fd1f7584be1450678e795e006654ec28a406e41453db117d45cf1e3491e1e1e9908581593117458c29cbc1a7a6126186cecc8264693a29f0c3db5bd19fcf34782fbecc97385eeabc56fc9a6de049d4100e8bcf31e4eb28b7f363c080a12afcfc7d59d9869ada8992146271f5549edfa8ef3a2b7aa5ee94478521e0e29085d9c1b1d631e645c5ba15791bc756743d433b21bc881817fb74abbbefc5136d20f9c6739c016a81000fa128385d5318dd586755260af3422cd9293d098d8d4ed0700e0b4681e74d"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x45}]}}, {{0x9, 0x5, 0x1, 0x2, 0x8cc5ac6fec5fe40e, 0x8, 0x45, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x6}, @generic={0x4a, 0xe, "bd9ac2dbc999cea1858733ff2bce00be85444e47f8f407b69c45500805341fa392e4227d6dfd19686cf97ba735746a0934f82931e9276498d485b55aab1d75eedd7f887dc00b0909"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x3ef, 0x6e, 0x9, 0x4, [@generic={0xb4, 0x8, "97524da6221164405cc5505f780e5a757ee65209701a6660037180c5274382ca765e804ebdf649b27e7b668d55f55c30778b0346cf2b575c862059767652fe86c4692a85a0fd59a36d10472d0accfff6856c1a04eb1d197916f6cfb315a62c570e097408d20aef3fc20945ca494a55f96e31e5e7386f135f0ef3cb16b28051cec1f996566626cefb8955afbc9ff6cecfbd78e7aee0911cbdbce1f169c58b6c7969ce319a1d4ed9cd7d1790cb926bcbfe0d91"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xf}]}}]}}]}}]}}, &(0x7f0000000a40)={0x4c, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x7, 0xb4, 0x57, 0x40, 0x90}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xe, 0x30, 0x2, 0x1, 0x2, 0x2}]}, 0x6, [{0x23, &(0x7f0000000740)=ANY=[@ANYBLOB="23034a2aa663d27bc00800000000809000999d5c511000"/35]}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x282d}}, {0xa7, &(0x7f00000007c0)=@string={0xa7, 0x3, "17a6333827292f6d0a2fe59a1a1820f9e14e8b682c89870e9d688eb0a70cde8d8316c87989432ec1900983aafa434c92dae69d319f705fecb05ebf117579a1ec5dc33c25bec7d3b50ef915fb831ceaf647336765e8c240e5ddb0d11a15cd90b1e2f3054080aecc0aed4a1ab0ccc5dac4c798813a92dbb0a7405355ffba87875d13fa065541c1a4940a9edfa114fb719bf30f1824769fec5f5882f5d724706a897f5843c838"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x411}}, {0x102, &(0x7f0000000b80)=@string={0x102, 0x3, "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"}}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x2b8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9}, 0xe) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x80) write$dsp(r3, &(0x7f0000000240)=' ', 0x1) close(r3) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x46}, &(0x7f00000000c0)=0x8) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) executing program 5: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000040)={0x5, 0x4, 0x1}) fadvise64(r0, 0x92, 0x5, 0x2) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x110000000097a9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x21, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875496364ab192cb8b873aa"}) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x100010, r0, 0x93771000) executing program 5: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x10, r1, 0xfffff000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x200800, &(0x7f0000000080)="7f593f52f82c40cce97b14454d1bc7af21f23c71fa", 0x15, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8296632bbac009c8c0a82746562ae178b96c50f0433d33d0b55bf51010c8726a65a82e4bb6da4a5178287bcc62e876ddbd7ea68498e2eb795437dc8a5d122c0e7612f3d214b80b1580cf1ad96a5096a19da83bf85cdeeab2108966ef35d10cdd6bab8317e81a2486c6ca246a3d9bbeea3c1048bf578ecb92864257f8d2164154b6ffa5e6eeee8bb3884724b25688d9d9fa1e98cf6977e0af2ecb78df02df16eed2232867a8a28128ff5095e5bf01d1") mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) syz_open_dev$char_usb(0xc, 0xb4, 0x6) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) executing program 36: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x10, r1, 0xfffff000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x200800, &(0x7f0000000080)="7f593f52f82c40cce97b14454d1bc7af21f23c71fa", 0x15, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8296632bbac009c8c0a82746562ae178b96c50f0433d33d0b55bf51010c8726a65a82e4bb6da4a5178287bcc62e876ddbd7ea68498e2eb795437dc8a5d122c0e7612f3d214b80b1580cf1ad96a5096a19da83bf85cdeeab2108966ef35d10cdd6bab8317e81a2486c6ca246a3d9bbeea3c1048bf578ecb92864257f8d2164154b6ffa5e6eeee8bb3884724b25688d9d9fa1e98cf6977e0af2ecb78df02df16eed2232867a8a28128ff5095e5bf01d1") mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) syz_open_dev$char_usb(0xc, 0xb4, 0x6) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) executing program 2: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x148) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f6921c2d13357a686d07abb5543643d583a8225ad8cf884cf19b47983a7e100f79f79149a25701321f291a984cd0c1b128d371c370afe932aa7164aab4d34a8a0023f3de2c62d3761f052addca4", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000400000000000000000000000100000000000031"], 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648d000) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x30}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fadvise64(r1, 0x92, 0x5, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) read$FUSE(r5, &(0x7f0000000080)={0x2020}, 0x2020) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x2000004}]}) msgget$private(0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3, 0x2, 0x80008}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000300)={r8, 0x80000}) r9 = creat(&(0x7f0000001380)='./file0\x00', 0x4) sendto$isdn(r9, &(0x7f0000000140)=ANY=[@ANYBLOB="f5400000af000000716b928a57dd9c9dfbd93cabca08038ccfe4e310c3f227a6ff0dd6d225bf8037f7e4422337d6e458ba317186dd6a612e754689098ec0d73228cd3b21f709ef6cc14396a82c6d8340692ecfc5874b767de575a747061e8738c6608a19e74fb84e38a4075f86914a4176850bde8e3369c0ef9b6c1ee078feaccc08d23dbb"], 0x8f, 0x4000004, 0x0, 0x0) mount$nfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fsc']) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000003, 0x20010, r1, 0xa4714000) executing program 7: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) recvmsg(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f00000000c0)}, {&(0x7f0000000100)=""/109, 0x6d}], 0x3}, 0x10020) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) sendmsg(r1, &(0x7f0000001980)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0xb47, @local, 0x8, 0x4}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000280)="dfd2f132443f44aef655e62ce5688eb8b69af5d60131951ba490116c", 0x1c}, {&(0x7f00000002c0)="1f6857fe0d58dda685bdebd03904af8b3e54219947c6355bcb4b407337dbe39143e2f5db81072c102102080643c5365e71cfeefb472315188585bc9c6b4d971a5a98dd8725318a127bea3357e028bcd2eadf4a98210c343495b7d90dcbc86dab15b560a70be2a276749e025f826045eb6a9071722b92d09e4cb904c2cab3c3e457fe17cceb8a9a192e9a85a7209572c59b2c08162d397c60980b13e3", 0x9c}, {&(0x7f0000000380)="921a3cfb9626b5be358f18837ec3eaed8cd61a5415f6835cbeb567f7488808614ae9f2a0098857ab0e6cbb11f2e16bfb9465c893ff89b46ede3b0828bc26c730ef4f8ba83ca800e2abb6ba88761d75f9df7deefdc0962e7c7001e9457385bc222036a6ea4138038b24ab78e23a44f4f81e6da833c5e204643ace72c921c4cd809301ac8f4f5e72e65da7a68748b80a79ba25508113e003a5c77772a95b6b8b5fb6cfab1a087dbc5aa4b00c15d9b78971c61149f21135c563c0c818b92006cf0f13c987e3ee356d9be717e7315935eba73a7bedae8c68d2a50fd7fb5e360d63671e7ea2eaeafe2caa61facee1774587f19a28a7522539", 0xf6}, {&(0x7f0000000480)="b6c3811b225513ade8ffd9e6a56263ad6dfcb25eb178db502d7dad40091fc02e593e98d16e6983a327bfcd97a7d501e64aeb2a47b678ce6ec7f47c9795aa82cbc924dfae979600d0fa5f12d42afb633354af94a44db486797468f7ba84bd44b5946dfca88fbce88716a28437060b9ceab77dff30b6c0b39c4ffa41d5cf5d01a3f04207fd2a747737f4ccfe53b7b42a8d45", 0x91}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="77f27c7c31d9d1313826f4bc3c694d9b29e5f0601becd3b7356a54d0c4a229fb1ea3fb0bff52aa8a13c2dafb071627c01ab4f74e91747f7f611b68cb6260e7bfa3754c2485f356bddcdf528bf12b07e857c0d7ea13e765cab0f8be7e97e91edc206b4c21c64c5ce49421bb1a29e3a6bdbc9b3e2d8c932a77f713d60adada91245d0e1729ece0a01644521e26e68c498a6faa2110bfefec1b93d8744d28528008728d49e999f26fb0f601420310edc998ac09ea95eb70003c7dc71c3b90dd6e0105d652c45a28673b62", 0xc9}, {&(0x7f0000001640)="e9b864f269753aadeb86e9167d33492531fa1e7b399a396d3e118d792d5c1c2eed0a75063c5f7f1207c561420c76dfc3157c5b4eb452899bddc833c508554a3f3b5fa939f12e9581d2b995db78abc32c501cff207811a2261c008c2fe2e867ac9eebf89c610a544b231c77ce5882120ad5c5006decc8d2948cfdbfef03a03631a912d727db880fbada2797fdb2d5f73a2cfeac22e453a31dcb9e8398c64bd5d17932a1561f3e1b35f3abc24a335d132ee5d5621b819a845ef7393229a38a91828455061d4cf80443a8f0b911ccf88311e03c9f5ba3becc8c28b4af3bdd7499d4ada1de6759db6dfec86d671465", 0xed}, {&(0x7f0000001740)="eb365fabae695bfb961da012f57d430ab039b10bc27172ac0c15ab4b9daede277a99b2cd6412d3396293f89e12d05821908649be9b9593dcaffab66a3c772fc0e4c53cace43eff77a07bd21cd005dcba59e9c034cf0f76697da6de4a01e501cd2fbed6a2bdceef780f35e3546eec06ed3001f07028e3609842cf94804d6bca8048731e842f409761161650a73ce645fca5094d95f96259e2", 0x98}, {&(0x7f0000001800)="bab047afc907f6db4f1957044194ac59cf23a69133a47a99d507d5b3be099f55b9021b1b9974a22ec0f91a491b879d35d60c0e591a440c967dd079e915d377b994440c56f3e26c15aa93981d8a37ffad95f11f83753de725f71b7aa8df738d7f5f349bf330becc7dffd3a5fd334b2452fb35206b487c92f41b46ec96e78fc0959725cb881d", 0x85}], 0x9}, 0x0) ioctl$sock_ifreq(r1, 0x8947, &(0x7f00000019c0)={'syz_tun\x00', @ifru_map={0x9, 0x6, 0x5, 0x1, 0x1, 0x9}}) sendmsg(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001a00)="d3eae8a1b750e3ed406d97c8eac60a21d3d192e5e14114d0d3eb8594b13f18f87bdbfef84b6087b81238e84e7d2a0a62509ea9d049c2dc6a9ab88abe7a5be3ae529e2677595d1e1ba95b78005802e883fd37ab53b38d10fa86ea28b030cc7daed8d6fa2988d27ae7d3e14fa39a12e7a9fbcfbf95ce38a26ac7ba846d3f90cb4e666c37fe6c8e581f182ee0457a8245a30e76139366bd347b3dff05ba94f032a353f7b1cefd606ae859b073e90a0a4abe98737df72645aa096d6d6360229d3deedbf0df0e6f8559494e511ddead75", 0xce}, {&(0x7f0000001b00)}, {&(0x7f0000001b40)="e93822b74d0d73ec5faa071f1d434f45bdf9e721cdb501541ec7df44124b47d88a8b00105bcb225277e797bae4479a363310fe8a1766770c580d5111ca690788b3adce26f8f1a649d4ad377dcedfe63d307ff0f3f84d8437611551eb31de6ef6975d30e0d9a2be320c19c09e3e00995f3a85390c2a7e7ec66a5e99e226f319f9932a63fad50344383527115eec7bde899eb57312c8b6a9ff53ee9a6d27e70bde7df6be81d503e34014c3f547423d9f54151ca36cea102ea3f16ed062af7c8388a6a9", 0xc2}], 0x3}, 0x0) ioctl$sock_netdev_private(r0, 0x89fb, &(0x7f0000001cc0)="e10aae4736e4e7a30b9e2107fc1cfe2a0dbe12dffe7da113d3b02961c6a2e11092201cb7860a628e14e47c94b364925db45c7eef9fe01f04db562e4478ab30798896f24324a95442fddbaf186b960a9d264b3a42882385d9c637bf27f4401a97a0514b8d94ee306cec31693069d293f86b279efae8f9592a9c20d8785644dd320457ef87d1dc5a8c132dcf3bc5b8ac10a859d99b747e5b2d1d820ee54e614db24ced59ff3fcb0d20440ca705b44cd82bddaf202c6dcc0e94d1497717a4676dcc2efe4048e52f7e61c0cbb38646fd4d4a5a3e6be6164825e0573e05aed1babe51606a1e2546e6eb0ee816f2863e2575cea8fed51c2300") (async) ioctl$sock_netdev_private(r0, 0x89fb, &(0x7f0000001cc0)="e10aae4736e4e7a30b9e2107fc1cfe2a0dbe12dffe7da113d3b02961c6a2e11092201cb7860a628e14e47c94b364925db45c7eef9fe01f04db562e4478ab30798896f24324a95442fddbaf186b960a9d264b3a42882385d9c637bf27f4401a97a0514b8d94ee306cec31693069d293f86b279efae8f9592a9c20d8785644dd320457ef87d1dc5a8c132dcf3bc5b8ac10a859d99b747e5b2d1d820ee54e614db24ced59ff3fcb0d20440ca705b44cd82bddaf202c6dcc0e94d1497717a4676dcc2efe4048e52f7e61c0cbb38646fd4d4a5a3e6be6164825e0573e05aed1babe51606a1e2546e6eb0ee816f2863e2575cea8fed51c2300") accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001ec0)=[{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001dc0)="f527ad885c200cde112cdd1909dade6ba2c41fa5bbdacd3d37e10c52932880274e4f22eb6b1ef34261faa33c9cade245d8d836a221fd15f3b36a998ba98178b1ea0d78c895961b5b23405e4697721b0af4a83096f9dafba17dff0be2c89461a47aba3d8f3a6884cd3edb728bb2", 0x6d}], 0x1, &(0x7f0000001e80)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xa}], 0x30, 0x4804}], 0x1, 0x90) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001f00)={0x1, @bcast, @netrom={'nr', 0x0}, 0x9, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8f53, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001f00)={0x1, @bcast, @netrom={'nr', 0x0}, 0x9, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8f53, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$int_in(r2, 0x0, &(0x7f0000001f80)=0x4) prctl$PR_GET_FPEXC(0xb, &(0x7f0000001fc0)) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000002000), 0x4) (async) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000002000), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002040)={'xfrm0\x00', 0x1000}) setsockopt$MRT_DONE(r2, 0x0, 0xc9, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000002080)={'veth0_macvtap\x00', @random="deddc1abb688"}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r3, &(0x7f00000020c0)="ca08a318dab76b1a73b34c1b41a62d7a8b01819e6fefc66f92f5bcc0fe797ebf66c2616643b3714517b2ba1094777c0f752d286da86a7671369bd7f51544cb12e12358073e171118a4cf25d17d49667af6714219bb3af6dd405f84f183b7f957297cf92680871319e04b6ab2c14133998c6b77d0775f", 0x76, 0x400c4, &(0x7f0000002140)={0xa, 0x0, 0x80000001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x824, 0x3}, 0x20) prctl$PR_GET_FPEXC(0xb, &(0x7f0000002180)) socket$inet_sctp(0x2, 0x1, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000021c0)={0x0, 0x2}, &(0x7f0000002200)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000002240)={r5, 0x6}, 0x8) signalfd(r4, &(0x7f0000002280), 0x8) (async) r6 = signalfd(r4, &(0x7f0000002280), 0x8) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f00000022c0)={0x8, r4}, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000002300)={0x1, 0x0, @pic={0x6, 0x0, 0x6, 0x5, 0x7, 0xf8, 0x4, 0x9, 0x3, 0x6, 0x3, 0x6, 0xf, 0x9, 0x1, 0xfa}}) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000002540)={0x7}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000002600)={r5, 0x48, &(0x7f0000002580)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e21, 0x300, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x567}, @in6={0xa, 0x4e21, 0xe3, @mcast2, 0x2}]}, &(0x7f0000002640)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000002600)={r5, 0x48, &(0x7f0000002580)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e21, 0x300, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x567}, @in6={0xa, 0x4e21, 0xe3, @mcast2, 0x2}]}, &(0x7f0000002640)=0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000026c0)={0x1, &(0x7f0000002680)=[{0x2, 0xcf, 0x8, 0x7fffffff}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000026c0)={0x1, &(0x7f0000002680)=[{0x2, 0xcf, 0x8, 0x7fffffff}]}, 0x10) executing program 7: mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) listen(r1, 0x5) chdir(&(0x7f0000000080)='./cgroup\x00') lstat(&(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) setxattr$system_posix_acl(&(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [{0x2, 0x5, r2}], {0x4, 0x7}, [{0x8, 0x4, r3}], {0x10, 0x6}, {0x20, 0x1}}, 0x34, 0x3) executing program 8: r0 = syz_open_dev$evdev(&(0x7f0000001740), 0xe7, 0x100400) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000001800)={0x1f, 0x2, &(0x7f0000001780)="1878"}) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x20a02, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) (async) read(r1, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r2, 0xf648b000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) executing program 2: mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0xa, &(0x7f0000000080)=[{0x0, 0x6, 0x2, 0x6}, {0x7, 0x5, 0x4, 0x3}, {0x8, 0x40, 0x4, 0x8000}, {0x7, 0x7, 0x9, 0x5}, {0x401, 0xbd, 0x3, 0xb}, {0x2, 0xff, 0x2, 0x3}, {0x96, 0xff, 0xd3, 0x336}, {0x800, 0x74, 0xf9, 0x2}, {0x1, 0x2, 0x8, 0x1f92}, {0x200, 0x1, 0x3, 0x5}]}) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0xa, &(0x7f0000000080)=[{0x0, 0x6, 0x2, 0x6}, {0x7, 0x5, 0x4, 0x3}, {0x8, 0x40, 0x4, 0x8000}, {0x7, 0x7, 0x9, 0x5}, {0x401, 0xbd, 0x3, 0xb}, {0x2, 0xff, 0x2, 0x3}, {0x96, 0xff, 0xd3, 0x336}, {0x800, 0x74, 0xf9, 0x2}, {0x1, 0x2, 0x8, 0x1f92}, {0x200, 0x1, 0x3, 0x5}]}) (async) executing program 8: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffff7, 0x4}) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[@rdmsr={0x32, 0x18, {0x84b}}], 0x18}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.pending_reads\x00', 0xd0080, 0x51bb01b75ea792b) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x10000, @dev={0xfe, 0x80, '\x00', 0xf}, 0x5}}, 0x2, 0x7}, &(0x7f00000001c0)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000200)={r3, 0xe}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x5, 0x0, 0xeeee0000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000002c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000340), &(0x7f0000000380)=0x4) r7 = fsmount(r2, 0x1, 0x6) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r8, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000500)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000580)={r9, 0x5, 0xb2}) r10 = fcntl$dupfd(r0, 0x0, r2) ioctl$AUTOFS_IOC_CATATONIC(r10, 0x9362, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) lseek(r6, 0x378ec00000, 0x0) r11 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2a) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f00000005c0)={0x101f8, 0x0, 0x4, 0x1000, &(0x7f0000ffb000/0x1000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r12, 0x4008af03, &(0x7f0000001b40)={0x9, 0x0, [{0x80a0000, 0xe5, &(0x7f0000000640)=""/229}, {0x8080000, 0x1000, &(0x7f0000000740)=""/4096}, {0x9000, 0x42, &(0x7f0000001740)=""/66}, {0x2000, 0xa, &(0x7f00000017c0)=""/10}, {0x8119000, 0xc7, &(0x7f0000001800)=""/199}, {0x2, 0xf4, &(0x7f0000001900)=""/244}, {0x1, 0x3, &(0x7f0000001a00)=""/3}, {0xdddd0000, 0x20, &(0x7f0000001a40)=""/32}, {0x2, 0x98, &(0x7f0000001a80)=""/152}]}) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000001cc0)={'filter\x00', 0x7, 0x4, 0x438, 0x130, 0x240, 0x350, 0x350, 0x350, 0x350, 0x4, &(0x7f0000001c80), {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x23f7, 0x7, 0x1, 0x0, "b31a39ef2b6317aad96173dd5b82173d7f7ca133e8052f889b96c1618bc4709f32a5723ade8e11ce3356141041f78e751b84cba9fb2087a00965b0da5b12fd99"}}}, {{@arp={@private=0xa010101, @empty, 0xff, 0xffffffff, 0x4, 0x2, {@mac=@local, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@random="a1e15a727e52", {[0xff, 0xff, 0xff, 0xff]}}, 0x11, 0xff, 0x1, 0x4, 0x0, 0x7ff, 'syz_tun\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x9d}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="07e77d937b18", @empty, @empty, @local, 0x4, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000002180)={0x1}) executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x32, 0xe4, 0x5, 0x8000}, {0xc7b, 0x22, 0x8, 0x4}, {0x2, 0xff, 0xc, 0x3c5}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x20}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x141942, 0x0) r2 = syz_clone(0x82000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330, r2}, 0x0) r3 = getpgid(r2) ioprio_set$pid(0x1, r3, 0x4004) pipe2(&(0x7f0000000040), 0x800) (async) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x32, 0xe4, 0x5, 0x8000}, {0xc7b, 0x22, 0x8, 0x4}, {0x2, 0xff, 0xc, 0x3c5}]}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x20}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x141942, 0x0) (async) syz_clone(0x82000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) capset(&(0x7f0000000080)={0x19980330, r2}, 0x0) (async) getpgid(r2) (async) ioprio_set$pid(0x1, r3, 0x4004) (async) executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x440280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount(&(0x7f0000001400)=@md0, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) executing program 0: creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bind$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x81, @mcast2, 0xffffffff}, 0x1c) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) r2 = fanotify_init(0x0, 0x0) timerfd_create(0x0, 0x80000) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r2, 0x1, 0x2a, r3, 0x0) fanotify_mark(r2, 0x2, 0x40001018, r3, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001b80), 0x109080, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000d00)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="202348000000364f918e088b2c6f40f1dfd3aa4f606d5ec1e537b71795e43d29ab818f83736a8e8fdd71ad8b2bc90f66ea79eae7413a1eb24f9bead708d3f853fd1f2f602377bb9c6185eedb71135a495c9fe1"], 0x0, 0x0, 0x0, 0x0}, 0x0) close(0x3) r2 = socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req={0xd26a, 0xffff0001, 0x101, 0x3}, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000240)=0x4) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x4a) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000200)={'amplc_pc236\x00', [0x1000, 0x9, 0xff, 0x10, 0xf90, 0x3, 0x3, 0xd7c0, 0x2, 0x10000, 0x0, 0x516a, 0x4, 0x3, 0x9, 0x2, 0x6b3, 0xa00, 0x8, 0x5, 0xe3bf, 0xda3, 0x1ff, 0x6, 0x0, 0xffffffff, 0x9, 0x4, 0x4, 0x5, 0x3, 0x5]}) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r4, @ANYRES64=r2], 0x0) executing program 8: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000640)={0x8, 0x1, &(0x7f0000000580)=[0x3737], &(0x7f00000005c0), &(0x7f0000000600), 0xffffffffffffffff}) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='v7\x00', 0x288002, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{0x0}, {&(0x7f0000002100)=""/4105, 0x1009}], 0x2, 0xfffffffc, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x2001}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) recvfrom(r2, &(0x7f0000000100)=""/108, 0x6c, 0x10000, 0x0, 0x0) executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f00000003c0)={0x28, 0x0, 0x1ffffcb66, @host}, 0x10) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r2, 0xf648b000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x8010) syz_clone(0x8008000, &(0x7f00000000c0)="1a17f7bc026af99a37ffc7d6d0a977db77e893f7d46769be3646a66f98cf3297f42e488ac1fc6993252e3d322f3ed2e385d5b48fa39bab82434b1a0871478a33ec95a8df11176ff0799eb6ec0d83cbe81ff45392258457f809e07231431e95bfadd29df22ad7383a959e96c7bf5909de300e7f8f47a5bd9b13499a47f71bba740de9ef13e0", 0x85, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000001180)="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") mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x1, 0x2) executing program 7: r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000240)={0x0, 0x4d20, 0x0, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000640)={0x8, 0x1, {0x8000000000000000, @struct={0x1, 0x3138724f}, r1, 0x4, 0x200, 0x4, 0x2, 0x8, 0x10, @struct={0x4358, 0x8}, 0x4, 0x9, [0x7, 0x0, 0x7, 0x894a000000000, 0x8d27, 0x8]}, {0x8, @struct={0x3, 0x7fff}, 0x0, 0x2, 0x8, 0x1, 0x1, 0x1, 0x90, @usage=0xf, 0x4, 0x8, [0x7fff, 0x7, 0x7f, 0x800, 0x6, 0x3]}, {0xe, @usage=0x7, 0x0, 0xb, 0x5, 0xe, 0x3, 0x3, 0x44, @struct={0x2, 0xfff}, 0x7ff, 0x1, [0x9, 0x17, 0x5, 0x4, 0x8000000000000001, 0x3]}, {0x4, 0x2, 0x4}}) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000180)=""/151, 0x97}, {&(0x7f0000000a40)=""/184, 0xb8}, {&(0x7f0000000b00)=""/146, 0x92}, {&(0x7f0000000bc0)=""/143, 0x8f}, {&(0x7f0000000c80)=""/224, 0xe0}], 0x5, 0x8, 0x9) symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r3, 0x80044944, 0x0) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) executing program 8: socket$rds(0x15, 0x5, 0x0) (async) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x0) (async) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000380)={0x8, 0x0, @broadcast}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000003c0)="08003b117c124057", 0x8}], 0x1}, 0x2004c880) (async) socket$netlink(0x10, 0x3, 0x8) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async, rerun: 64) ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000180)={0x0, 0xfffffffffffffe98}) (async, rerun: 64) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140), 0x101, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f00000000c0)={0xfffffffe}) creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000180)=0x1, 0x4) mount(&(0x7f0000000000)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='xfs\x00', 0x2308c8b, 0x0) syz_open_dev$video(&(0x7f0000000140), 0x101, 0x0) (async) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f00000000c0)={0xfffffffe}) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) socket$inet6(0xa, 0x800000000000002, 0x0) (async) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000180)=0x1, 0x4) (async) mount(&(0x7f0000000000)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='xfs\x00', 0x2308c8b, 0x0) (async) executing program 8: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x50) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) recvfrom$inet6(r1, &(0x7f0000000300)=""/218, 0xda, 0x120, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x93771000) executing program 0: ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_SET_DEVICE_ATTR_vm(r0, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x80000000, 0x1, &(0x7f0000000000)=0x7}) fsync(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8b000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xaab61f4d80e63913}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0x1a, 0x34, @random="ad5f6769463c7395b9f062f9dca68e8e1cf496221777"}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="28cc2ea2f29592012ad0f8a1ead50fd26ac4029e1d67dfbf949548"}]}, 0x68}}, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xe8) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, r6, &(0x7f00000004c0)='./file0\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x121002, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2c) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000540), 0xc52080, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0], 0x1}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r9 = syz_open_dev$audion(&(0x7f0000000600), 0x1, 0x0) r10 = accept4$tipc(r9, &(0x7f0000000640), &(0x7f0000000680)=0x10, 0x80000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r9, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x108, r11, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x40}, {0x6, 0x16, 0xfff}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xf98}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x563}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10}, {0x6}, {0x5}}]}, 0x108}, 0x1, 0x0, 0x0, 0x4008051}, 0x80) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24040000) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000a00)={'pim6reg0\x00', 0x200}) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000c80)={&(0x7f0000000a40), 0xc, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x180, r12, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "070fd46880ac05f909b18217f4142018943e5d181a61"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "2b5e3f6550702830bb5ea1a92e345426780dc18803b9768ed84ccd9cf653bfc9a1"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "260a8f2e51483eda0e13f17d6e68251ba1c7c8d5a25a19f3614ed801e1a83aa0d2"}}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "25e4146126d55bde4d8803eb97db8f6b80b6bf378be8f21664ef04b3"}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x40000}, 0x11) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xd4, r3, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8e, 0x37}}}}, [@NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{}, {0x7}, {0x4d, 0x1}, {0x0, 0x3}, {0x7f, 0x3}, {0x9, 0x2}, {0x54, 0x3}, {0xde, 0x5}, {0x5, 0x5}, {0x2, 0x4}, {0x7, 0x6}, {0xb}, {0x80}, {0x3, 0x5}, {0x5}, {0x2, 0x1}, {0xc2, 0x5}, {0x4, 0x1}, {0x5, 0x1}, {0xf9, 0x7}], "a2ac0e2733954206"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x4, 0x4}, {0x1, 0x7}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x5}], "ce3a2c5d7f23cffb"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x1, 0x2}, {0x5d, 0x6}, {0x8, 0x6}, {0x5a, 0x4}, {0x1f, 0x4}, {0x7, 0x7}], "4dd5edd8a3e114da"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x1, 0x5}, {0x8, 0x2}, {0x0, 0x1}, {0x0, 0x5}, {0x3, 0x7}, {0x0, 0x6}, {0x3b, 0x2}, {0xfb, 0x1}, {0xa, 0x7}, {0xa, 0x3}], "509cd36742d5426d"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0xd, 0x1}, {0x68, 0x3}, {0x5, 0x5}, {0xb5, 0x4}, {0xa, 0x4}, {0x3, 0x6}, {0x7, 0x2}, {0x1, 0x5}, {0x8, 0x5}, {0x40, 0x4}, {0x9, 0x7}, {0x18}, {0x3, 0x5}, {0x2, 0x5}], "00fb0318e60fb7a3"}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10000090}, 0x8000) getsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f00000010c0)={@empty, 0x0}, &(0x7f0000001100)=0x14) sendmsg$inet(r10, &(0x7f00000012c0)={&(0x7f0000000e80)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000ec0)="f793be03122209bda752fcc4cbd181c76b17cb6123b5b95e315dd789a0486be55974f84258f30cb53a7bba10c1921214fa8a7e681254d2ec337c55d3296a3e2bc0a6b73634b599384ae6718795dc882c0e09f7e9e824ea4ae791500d8ad4b386b632d22c84a5449ea69003222214efa4478f3e98048f57d02a6058e10f5f899bae300d7bd68b599ddb817f3f4844696fdf3ce12b70012afc59c114bbf0b5b560bf42c214e1ced353fe1fe940c6cb03d42394519fe11992ee5943f871038065a400fd99f12b7b07a2669cc29a9836e93078", 0xd1}, {&(0x7f0000000fc0)="f4406ac907fd5210e35bb0991246455111be12c9b6110e0671079adbb0c05ffade2019ca18cf5985c4616808fd497c0e31c33efb16c4c8d658bb8d914f2eeeb37c", 0x41}, {&(0x7f0000001040)="7dbfff9cb52c0488d7f65d5ea659772d55e5fb47fc6a187d8d3d26c685f81d3d7b955125587bc1ba0f3307c0847c01d04de93d8bf7447b50", 0x38}], 0x3, &(0x7f0000001140)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @local, @broadcast}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x14, 0x0, 0x5, [0x5, 0x6, 0x3, 0x1ff, 0x0]}, @generic={0x88, 0x2}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8934}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @private=0xa010102}}}, @ip_retopts={{0x80, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xba, [@rand_addr=0x64010101]}, @ra={0x94, 0x4}, @noop, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0x5a, [@broadcast, @remote]}, @cipso={0x86, 0x38, 0x1, [{0x0, 0x11, "cb03e1f56d26038b414c16bfcbef3e"}, {0x0, 0x5, "31931d"}, {0x4, 0x7, "d370dcdd41"}, {0x2, 0xd, "375a8dc3c1e8d34de1490d"}, {0x5, 0x8, "252737054b27"}]}, @ssrr={0x89, 0xf, 0x3f, [@dev={0xac, 0x14, 0x14, 0x30}, @multicast2, @multicast1]}, @rr={0x7, 0xb, 0x56, [@local, @multicast1]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x150}, 0x4000000) syz_open_dev$dri(&(0x7f0000001300), 0x850, 0x400000) executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x20000, 0x40) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'batadv_slave_1\x00', &(0x7f0000000040)=@ethtool_rxfh={0x47, 0x400, 0x2, 0x8, 0x6, 'q-v', 0x3, [0x2, 0x7, 0xa9, 0x4, 0x3, 0x728, 0x0, 0x20]}}) getdents(r0, &(0x7f00000000c0)=""/235, 0xeb) cachestat(r0, &(0x7f00000001c0)={0x7fff, 0x1}, &(0x7f0000000200), 0x0) mknodat$null(r0, &(0x7f0000000240)='./file0\x00', 0x2, 0x103) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x240, 0x102) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000002c0)=0x1, 0x4) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) r1 = msgget$private(0x0, 0x23) msgrcv(r1, &(0x7f0000000380)={0x0, ""/185}, 0xc1, 0x3, 0x1000) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$sock(r2, &(0x7f00000011c0)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x5e4, @local, 0x24}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)="7b197d6f7853092dcc0a42d1f40865e4a3c0aaeb1e545c417cad65e2537a14d8f50083e1b91ff2de48903f0c9e82a2f737006d47a2667fd12a6dbe702d32cdc1aa942c27316dfcbb0a649989310a10caf404532327e8db4b36591b86d9031bc4c14a6848c13bc3edb05ce3ffcde260a5e88a065c1948a2a2b21ff9d4cf3e5e088439513cb04feed81562ecb677f60b3f9be5af55a3101b0406a634c8e38549cf84d033b8013edbb23d1f8d1dfc7f2bf6131251fd07ce1ab5f3c834a4c3694b28969073f2f79b1c35f12090f9e68a3ca3fbeade789bac45172ad0344d56c4", 0xde}], 0x1, &(0x7f0000000640)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xfe6}}], 0x48}}, {{&(0x7f00000006c0)=@phonet={0x23, 0x7, 0x9, 0x3}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000740)="42c7c73aff7bb1fb972d04ebfdb4949911e2d4e2a7e0e324f797ab024641ee109f51e052409c65fd58b1dbce447331099b4dc9", 0x33}], 0x1, &(0x7f00000007c0)=[@timestamping={{0x14, 0x1, 0x25, 0x400}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000001}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x90}}, {{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x4, 0x2, 0x1, {0xa, 0x4e22, 0x9, @private2, 0x6}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000900)}, {&(0x7f0000000940)="0d47ef03ec7c7536ee", 0x9}, {&(0x7f0000000980)="96678fab33ca2bb9b425ceec3da5ace35e937601429867d6f01cce069b4c34553d7feb7588a458fdc8145e36520ce4f812fec44bf3312ce9fe846a8e6a166c5759a4ac7967683a01518ebbc429177abc8c60f9b231022019987dd6c7902c70256e06acc77556a23ca496cd85a2946b51aa", 0x71}, {&(0x7f0000000a00)="b6b3dd76a0b7241a6db5179678b73b2a672ff5128ee74ba197f785a38979f5dc7120b4beb29a88178b128474e4a4e42fff7584fdce62583d935a06ea41d1e17cce67ea16bd1c76ad8b5df1bdba139ddc7e57942138b9cf79c8", 0x59}], 0x4, &(0x7f0000000ac0)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x58b}}, @mark={{0x14, 0x1, 0x24, 0xc}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}], 0xf0}}, {{&(0x7f0000000bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x4, 0x1, {0xa, 0x4e20, 0x8, @local, 0x8}}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000c40)="3d01b1b9313c6ccc46c8aa76e6c1a9f8935f4e14a38cc39344cc6d85c004bd1b7d2bb6aa0b70cd62ac626246ffff9352b1f99e26820f6931e7ab9522df0cb61ea71da3a0d0302f5e0bf196e85247adb5ba8a68b6a7bdafd3d797e398970d997b00ffd95358288d551b45c73cacdee3aab0711c2bd34d56f128f418cd16b3895cb18be1ad691ebcee7a6d910f9b65dd79e454edd3138813edfa6cc491e4a8eab16e5c10a76785735195308b97b4e0cfa7df26b8b0a9771542b67427bcc2a062e50a33980fda7839ccc8447bed5d73a84f39", 0xd1}, {&(0x7f0000000d40)="0efe35806c3cfbeb133a85c09d205d70fb9c47f4acab7883d7810a575cf1ab87476b9a5bf860652265b65bbefcdad209d717c58343e964c95a50d4efc140ee2d2f672a4253b75f110591f574244d1374e28fc9683f282b00fcc2475582531cd378120b199702a0e131758737aaafc2b384b8627515dfbe93e62a00e74a911b270b5e9a45cb624a3b95cbaf15f0bcdcf7726be7c64d942343924a3f9b9b1a98", 0x9f}, {&(0x7f0000000e00)="b9bac540b4cde97354394ded15b2f958f0ea5d799ed72d6f6a3c39272b98d283", 0x20}, {&(0x7f0000000e40)="10e6494ac5cc", 0x6}, {&(0x7f0000000e80)="e2d41eb51f0b729df53d86c01a0b662d0fab307e1185d50915307ce3e0452cdcf41a08e60a6f49a1b6f99e3f6fcacf20f0b486880397bd85ff8e8b3af2ffe45b99fb6e88c797a9af5772aaf77e4619e3acb71455e48ad44fe66618d9dd7b2b24d5e24bb003d8f4a59b4082454d91e580251342f39ffd5075bed42fed5efdfb728e43f266d9dc068b85d978631f89e43791cef6cac4a8b19e2b82684202e8f66e635e2bf769953ee2baca1894e11c1b9d923a1d86ffd086007e055a8efc3de8fc4b4d64772be00e75d931fc3ec442743ed17f8335ff2b93bb19e4484f65bcc752c5a4c6f883661d2786b4cd7cc50633ec1398c2628ad796", 0xf7}, {&(0x7f0000000f80)="e4e38d125addc8fbc801e297639cf93990f87b8797d6ad8991cd88f7a256368d4b203b1a0b3f8167d3bdd42cca9d46c10f5f8e91b64807c7685ed83263616eccad279b2055b0ce5ad343777d054f949bf469b3d753d12eac838275c1046d403b1b95a9eca32a8a133c87a679bb5fe79a47e781bca1e3d57e5961f2b94d", 0x7d}, {&(0x7f0000001000)="e0e52a57c57e90008b7cc06742cc621c47d73d975e3d119c4228e6451802769814fd23bca941a88d6a3dbf715429220303739a5fd9a2f6aacac55362f5a30420817352ddf6eda66a52e20942baebcad8552f7ebe7ed7297ab48eba7e986d", 0x5e}], 0x7, &(0x7f0000001100)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x8001}}, @mark={{0x14, 0x1, 0x24, 0xc}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x6a}}], 0xc0}}], 0x4, 0x4008800) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x3c, 0x5, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}}, 0x4) r5 = fspick(r0, &(0x7f0000001400)='./file0\x00', 0x0) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000001440)) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000001480)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) r7 = semget$private(0x0, 0x2, 0x601) semctl$IPC_INFO(r7, 0x4, 0x3, &(0x7f00000014c0)=""/205) socket$inet6(0xa, 0xa, 0xffff) connect$rose(r2, &(0x7f00000015c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @bcast}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), r0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000001680)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001640)={0xffffffffffffffff}, 0x106, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f00000016c0)={0x4, 0x8, 0xfa00, {r8, 0xcc06}}, 0x10) r9 = syz_open_dev$evdev(&(0x7f0000001700), 0x3, 0x725081) ioctl$EVIOCGBITSW(r9, 0x80404525, &(0x7f0000001740)=""/55) writev(r5, &(0x7f0000001840)=[{&(0x7f0000001780)="1aa978667ad71ac9929fc20cb9e3f5a15d653c3d96349dc9d0c128387005aa4610065a010c19cc81dd4f57091129f321a4bc0399cbc4fd36aa90b73a7ee7672a69364489c884f3a7d5d7215e9e8fa8582ddda34d86ea626aefc46d8f25cab6ee1d8d641e5923261b9507d0044b8bb742a85d45c7d383c380b65cfd659f24d8c9afc1e73e454a7800824597f207523e4e1e0b1688825df402430a96", 0x9b}], 0x1) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000001c00)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001900)={0x2a8, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa6bb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe2}]}, @TIPC_NLA_SOCK={0xa4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x972a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd5, 0x3, "88f0f9c2c1c1469fe6dc15059834b5e65d62ff292015e822cd60b93202da830b73d0d8a926aabe3994c5852233e391ef60a9299268c842d160f553d1196028acc56732ca54fe9ec759816d2a096ae408cb1cd934c4ad5ae05bbec5165fe42f9f35c75f9e32f5de9df638fd668e36a24c012fcda3a968bf0f36daafc8bfd656036010d8e68a8fb066a95a2567f09ce523ef861bddbc11fb6d0803013d97cdeab4b5f6a3f2fb26c2e683965166ef2c1b74c4739d87e1572c3e9f6830c58974256e18396094013e784b8e64a6ff73506c78b5"}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x25}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x40088d5) executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) mount$nfs(&(0x7f00000000c0)='-&[(\x00', &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{'--.'}, {'nilfs2\x00'}, {'nilfs2\x00'}, {'nilfs2\x00'}, {}, {'('}, {'nilfs2\x00'}, {'.'}, {'/dev/rnullb0\x00'}, {'nilfs2\x00'}], [{@appraise_type}, {@obj_role={'obj_role', 0x3d, '/dev/rnullb0\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@dont_hash}, {@appraise_type}, {@flag='nomand'}, {@subj_type={'subj_type', 0x3d, '/dev/rnullb0\x00'}}]}) executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}]}]}, 0x30}}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x2, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) setresuid(0xee01, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x3) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x10) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40046302, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) write$uinput_user_dev(r3, &(0x7f00000004c0)={'syz0\x00', {0x9, 0x2, 0x9, 0x3ff}, 0x4a, [0x0, 0x81, 0x7, 0x200, 0x58a, 0x5, 0x91, 0x9, 0x5, 0x2, 0xf2e7, 0x1, 0x3, 0x0, 0x4, 0xfff, 0xf4, 0xffffffff, 0x2, 0x3ff, 0x3, 0x101, 0x6, 0x80, 0x9, 0x3, 0x8, 0x8, 0xffff, 0x5, 0x6, 0x560, 0x1, 0x5, 0xc00, 0x7, 0x8, 0x10000, 0x6, 0x7, 0x2c7b, 0x0, 0x7, 0x3, 0x4, 0x8000, 0x0, 0xff, 0x100, 0x6, 0xfffffff9, 0x4, 0x1, 0x6, 0x4, 0x6, 0x80, 0xb64, 0x2, 0x91c8, 0x9, 0x6, 0x6, 0x1], [0xffffff80, 0x6, 0x2, 0x80000000, 0x3, 0x7ff, 0x8, 0x101, 0x0, 0x8, 0x4, 0x5, 0x40, 0xb, 0x9, 0x1, 0x4, 0x3, 0x6, 0x0, 0x63, 0x1, 0x800, 0x12, 0x8c5, 0xf, 0x6, 0x8, 0x2, 0x10, 0x5, 0x6, 0x4, 0x6, 0x2, 0x3, 0x8, 0x1, 0x4, 0x3, 0x2d2, 0x40, 0x4, 0x100, 0xde, 0x9, 0x6, 0x4e9, 0x0, 0xfffffffc, 0x80, 0x7f20dd96, 0x4, 0x63b9, 0x100, 0x6, 0x6, 0x7f, 0x0, 0x68, 0xffff72aa, 0x5, 0xffffffff, 0x8001], [0x8, 0x6, 0xe, 0xffffffb6, 0x7, 0x879, 0xc, 0x0, 0xa, 0x3ff, 0xfffffff7, 0x9, 0x1ff, 0x6, 0x1, 0x8, 0xaf5c, 0x6, 0x8, 0xfffffff6, 0x7a, 0x6, 0x7000000, 0x9, 0x3bf99e39, 0x8, 0x10, 0x2, 0x7f, 0x2, 0x1, 0x6, 0xfffffffa, 0x6, 0x3cee, 0x5, 0x2, 0x8a9, 0x8, 0x3, 0x2, 0x1, 0x24d, 0x80000000, 0x40, 0x3, 0x200, 0x10001, 0xe, 0x3, 0x5, 0xffffff7e, 0x5, 0x6, 0x2b7, 0xeaf, 0x4c, 0x2, 0x5, 0x800, 0x0, 0x1, 0x5, 0x7], [0xffff, 0x3, 0x10000, 0x3f9e, 0xe, 0x19, 0x5, 0xe, 0x8, 0x1, 0x8000, 0xba, 0xbba, 0x4, 0x4, 0xd, 0xff, 0x8, 0x303b, 0x7, 0x7, 0x8, 0x6, 0x8, 0x7, 0x3, 0x0, 0xcb, 0xb6, 0x8, 0x60, 0xffff7fff, 0x0, 0xc, 0x401, 0x4, 0x102, 0x1, 0x80000000, 0x4, 0x12c6, 0xd, 0x80000, 0x2, 0x1, 0x8001, 0x3, 0x3, 0x0, 0x7, 0x7fffffff, 0x4, 0x4, 0xf, 0x8, 0x4, 0x101, 0x2, 0xffffffff, 0x4, 0x9, 0x2, 0x61f09ecc, 0xdea9]}, 0x45c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fstat(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) executing program 8: r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x179}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r1, 0xaea2, 0x0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f00000000c0)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x7) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xac) ioctl$KVM_CAP_SYNC_REGS(r0, 0x4068aea3, &(0x7f0000000340)) readv(r3, &(0x7f0000001800)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/207, 0xcf}, {&(0x7f00000014c0)=""/220, 0xdc}, {&(0x7f00000015c0)=""/15, 0xf}, {&(0x7f0000001600)=""/62, 0x3e}, {&(0x7f0000001640)=""/223, 0xdf}, {&(0x7f0000001740)=""/88, 0x58}, {&(0x7f00000017c0)=""/62, 0x3e}], 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000080)=0x8, 0x4) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0xf1cd3e1dfaaaa71a, 0x0) executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xd, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) sendmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)="5ff4c2328c1dffea2fe1c181bb2b", 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="59bb7c436077bcd8099c6e2d10b8c6f1d2fbd238491903133c42d47d52", 0x1d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)="83", 0x1}], 0x1}}], 0x3, 0x10048885) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) sync() mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x1000400, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000004503"]) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2) program did not crash replaying the whole log did not cause a kernel crash single: executing 14 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-bind$inet6-connect$inet6-setsockopt$SO_BINDTODEVICE-sendmmsg-mkdir-sync-mount$overlay-openat$kvm-dup-ioctl$KVM_SET_MSRS-mount-syz_genetlink_get_family_id$mptcp detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xd, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) sendmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)="5ff4c2328c1dffea2fe1c181bb2b", 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="59bb7c436077bcd8099c6e2d10b8c6f1d2fbd238491903133c42d47d52", 0x1d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)="83", 0x1}], 0x1}}], 0x3, 0x10048885) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) sync() mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x1000400, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000004503"]) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_add_vcpu$x86-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_TSC_KHZ_cpu-ioctl$KVM_GET_DEBUGREGS-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCVHANGUP-openat$ttyS3-creat-ioctl$KVM_CAP_SYNC_REGS-readv-openat$cgroup_ro-write$cgroup_subtree-mmap-socket$kcm-setsockopt$kcm_KCM_RECV_DISABLE-mount detailed listing: executing program 0: r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x179}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r1, 0xaea2, 0x0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f00000000c0)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x7) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xac) ioctl$KVM_CAP_SYNC_REGS(r0, 0x4068aea3, &(0x7f0000000340)) readv(r3, &(0x7f0000001800)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/207, 0xcf}, {&(0x7f00000014c0)=""/220, 0xdc}, {&(0x7f00000015c0)=""/15, 0xf}, {&(0x7f0000001600)=""/62, 0x3e}, {&(0x7f0000001640)=""/223, 0xdf}, {&(0x7f0000001740)=""/88, 0x58}, {&(0x7f00000017c0)=""/62, 0x3e}], 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000080)=0x8, 0x4) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0xf1cd3e1dfaaaa71a, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$vsock_stream-getsockopt-landlock_create_ruleset-landlock_restrict_self-setresuid-faccessat-madvise-openat$rnullb-openat$uinput-openat$binderfs-ioctl$BINDER_WRITE_READ-write$uinput_user_dev-socketpair$unix-openat$tcp_congestion-fstat-setreuid-mmap detailed listing: executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x2, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) setresuid(0xee01, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x3) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x10) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40046302, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) write$uinput_user_dev(r3, &(0x7f00000004c0)={'syz0\x00', {0x9, 0x2, 0x9, 0x3ff}, 0x4a, [0x0, 0x81, 0x7, 0x200, 0x58a, 0x5, 0x91, 0x9, 0x5, 0x2, 0xf2e7, 0x1, 0x3, 0x0, 0x4, 0xfff, 0xf4, 0xffffffff, 0x2, 0x3ff, 0x3, 0x101, 0x6, 0x80, 0x9, 0x3, 0x8, 0x8, 0xffff, 0x5, 0x6, 0x560, 0x1, 0x5, 0xc00, 0x7, 0x8, 0x10000, 0x6, 0x7, 0x2c7b, 0x0, 0x7, 0x3, 0x4, 0x8000, 0x0, 0xff, 0x100, 0x6, 0xfffffff9, 0x4, 0x1, 0x6, 0x4, 0x6, 0x80, 0xb64, 0x2, 0x91c8, 0x9, 0x6, 0x6, 0x1], [0xffffff80, 0x6, 0x2, 0x80000000, 0x3, 0x7ff, 0x8, 0x101, 0x0, 0x8, 0x4, 0x5, 0x40, 0xb, 0x9, 0x1, 0x4, 0x3, 0x6, 0x0, 0x63, 0x1, 0x800, 0x12, 0x8c5, 0xf, 0x6, 0x8, 0x2, 0x10, 0x5, 0x6, 0x4, 0x6, 0x2, 0x3, 0x8, 0x1, 0x4, 0x3, 0x2d2, 0x40, 0x4, 0x100, 0xde, 0x9, 0x6, 0x4e9, 0x0, 0xfffffffc, 0x80, 0x7f20dd96, 0x4, 0x63b9, 0x100, 0x6, 0x6, 0x7f, 0x0, 0x68, 0xffff72aa, 0x5, 0xffffffff, 0x8001], [0x8, 0x6, 0xe, 0xffffffb6, 0x7, 0x879, 0xc, 0x0, 0xa, 0x3ff, 0xfffffff7, 0x9, 0x1ff, 0x6, 0x1, 0x8, 0xaf5c, 0x6, 0x8, 0xfffffff6, 0x7a, 0x6, 0x7000000, 0x9, 0x3bf99e39, 0x8, 0x10, 0x2, 0x7f, 0x2, 0x1, 0x6, 0xfffffffa, 0x6, 0x3cee, 0x5, 0x2, 0x8a9, 0x8, 0x3, 0x2, 0x1, 0x24d, 0x80000000, 0x40, 0x3, 0x200, 0x10001, 0xe, 0x3, 0x5, 0xffffff7e, 0x5, 0x6, 0x2b7, 0xeaf, 0x4c, 0x2, 0x5, 0x800, 0x0, 0x1, 0x5, 0x7], [0xffff, 0x3, 0x10000, 0x3f9e, 0xe, 0x19, 0x5, 0xe, 0x8, 0x1, 0x8000, 0xba, 0xbba, 0x4, 0x4, 0xd, 0xff, 0x8, 0x303b, 0x7, 0x7, 0x8, 0x6, 0x8, 0x7, 0x3, 0x0, 0xcb, 0xb6, 0x8, 0x60, 0xffff7fff, 0x0, 0xc, 0x401, 0x4, 0x102, 0x1, 0x80000000, 0x4, 0x12c6, 0xd, 0x80000, 0x2, 0x1, 0x8001, 0x3, 0x3, 0x0, 0x7, 0x7fffffff, 0x4, 0x4, 0xf, 0x8, 0x4, 0x101, 0x2, 0xffffffff, 0x4, 0x9, 0x2, 0x61f09ecc, 0xdea9]}, 0x45c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fstat(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$incfs-ioctl$sock_SIOCETHTOOL-getdents-cachestat-mknodat$null-openat$dir-setsockopt$CAN_RAW_JOIN_FILTERS-getsockopt$CAN_RAW_LOOPBACK-msgget$private-msgrcv-syz_init_net_socket$rose-socket$nl_netfilter-sendmmsg$sock-ioctl$AUTOFS_DEV_IOCTL_EXPIRE-sendmsg$IPSET_CMD_RENAME-fspick-ioctl$TIOCGSOFTCAR-socket$pptp-bind$pptp-semget$private-semctl$IPC_INFO-socket$inet6-connect$rose-syz_genetlink_get_family_id$nl80211-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_RESOLVE_ROUTE-syz_open_dev$evdev-ioctl$EVIOCGBITSW-writev-sendmsg$TIPC_NL_BEARER_GET detailed listing: executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x20000, 0x40) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'batadv_slave_1\x00', &(0x7f0000000040)=@ethtool_rxfh={0x47, 0x400, 0x2, 0x8, 0x6, 'q-v', 0x3, [0x2, 0x7, 0xa9, 0x4, 0x3, 0x728, 0x0, 0x20]}}) getdents(r0, &(0x7f00000000c0)=""/235, 0xeb) cachestat(r0, &(0x7f00000001c0)={0x7fff, 0x1}, &(0x7f0000000200), 0x0) mknodat$null(r0, &(0x7f0000000240)='./file0\x00', 0x2, 0x103) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x240, 0x102) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000002c0)=0x1, 0x4) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) r1 = msgget$private(0x0, 0x23) msgrcv(r1, &(0x7f0000000380)={0x0, ""/185}, 0xc1, 0x3, 0x1000) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$sock(r2, &(0x7f00000011c0)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x5e4, @local, 0x24}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)="7b197d6f7853092dcc0a42d1f40865e4a3c0aaeb1e545c417cad65e2537a14d8f50083e1b91ff2de48903f0c9e82a2f737006d47a2667fd12a6dbe702d32cdc1aa942c27316dfcbb0a649989310a10caf404532327e8db4b36591b86d9031bc4c14a6848c13bc3edb05ce3ffcde260a5e88a065c1948a2a2b21ff9d4cf3e5e088439513cb04feed81562ecb677f60b3f9be5af55a3101b0406a634c8e38549cf84d033b8013edbb23d1f8d1dfc7f2bf6131251fd07ce1ab5f3c834a4c3694b28969073f2f79b1c35f12090f9e68a3ca3fbeade789bac45172ad0344d56c4", 0xde}], 0x1, &(0x7f0000000640)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xfe6}}], 0x48}}, {{&(0x7f00000006c0)=@phonet={0x23, 0x7, 0x9, 0x3}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000740)="42c7c73aff7bb1fb972d04ebfdb4949911e2d4e2a7e0e324f797ab024641ee109f51e052409c65fd58b1dbce447331099b4dc9", 0x33}], 0x1, &(0x7f00000007c0)=[@timestamping={{0x14, 0x1, 0x25, 0x400}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000001}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x90}}, {{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x4, 0x2, 0x1, {0xa, 0x4e22, 0x9, @private2, 0x6}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000900)}, {&(0x7f0000000940)="0d47ef03ec7c7536ee", 0x9}, {&(0x7f0000000980)="96678fab33ca2bb9b425ceec3da5ace35e937601429867d6f01cce069b4c34553d7feb7588a458fdc8145e36520ce4f812fec44bf3312ce9fe846a8e6a166c5759a4ac7967683a01518ebbc429177abc8c60f9b231022019987dd6c7902c70256e06acc77556a23ca496cd85a2946b51aa", 0x71}, {&(0x7f0000000a00)="b6b3dd76a0b7241a6db5179678b73b2a672ff5128ee74ba197f785a38979f5dc7120b4beb29a88178b128474e4a4e42fff7584fdce62583d935a06ea41d1e17cce67ea16bd1c76ad8b5df1bdba139ddc7e57942138b9cf79c8", 0x59}], 0x4, &(0x7f0000000ac0)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x58b}}, @mark={{0x14, 0x1, 0x24, 0xc}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}], 0xf0}}, {{&(0x7f0000000bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x4, 0x1, {0xa, 0x4e20, 0x8, @local, 0x8}}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000c40)="3d01b1b9313c6ccc46c8aa76e6c1a9f8935f4e14a38cc39344cc6d85c004bd1b7d2bb6aa0b70cd62ac626246ffff9352b1f99e26820f6931e7ab9522df0cb61ea71da3a0d0302f5e0bf196e85247adb5ba8a68b6a7bdafd3d797e398970d997b00ffd95358288d551b45c73cacdee3aab0711c2bd34d56f128f418cd16b3895cb18be1ad691ebcee7a6d910f9b65dd79e454edd3138813edfa6cc491e4a8eab16e5c10a76785735195308b97b4e0cfa7df26b8b0a9771542b67427bcc2a062e50a33980fda7839ccc8447bed5d73a84f39", 0xd1}, {&(0x7f0000000d40)="0efe35806c3cfbeb133a85c09d205d70fb9c47f4acab7883d7810a575cf1ab87476b9a5bf860652265b65bbefcdad209d717c58343e964c95a50d4efc140ee2d2f672a4253b75f110591f574244d1374e28fc9683f282b00fcc2475582531cd378120b199702a0e131758737aaafc2b384b8627515dfbe93e62a00e74a911b270b5e9a45cb624a3b95cbaf15f0bcdcf7726be7c64d942343924a3f9b9b1a98", 0x9f}, {&(0x7f0000000e00)="b9bac540b4cde97354394ded15b2f958f0ea5d799ed72d6f6a3c39272b98d283", 0x20}, {&(0x7f0000000e40)="10e6494ac5cc", 0x6}, {&(0x7f0000000e80)="e2d41eb51f0b729df53d86c01a0b662d0fab307e1185d50915307ce3e0452cdcf41a08e60a6f49a1b6f99e3f6fcacf20f0b486880397bd85ff8e8b3af2ffe45b99fb6e88c797a9af5772aaf77e4619e3acb71455e48ad44fe66618d9dd7b2b24d5e24bb003d8f4a59b4082454d91e580251342f39ffd5075bed42fed5efdfb728e43f266d9dc068b85d978631f89e43791cef6cac4a8b19e2b82684202e8f66e635e2bf769953ee2baca1894e11c1b9d923a1d86ffd086007e055a8efc3de8fc4b4d64772be00e75d931fc3ec442743ed17f8335ff2b93bb19e4484f65bcc752c5a4c6f883661d2786b4cd7cc50633ec1398c2628ad796", 0xf7}, {&(0x7f0000000f80)="e4e38d125addc8fbc801e297639cf93990f87b8797d6ad8991cd88f7a256368d4b203b1a0b3f8167d3bdd42cca9d46c10f5f8e91b64807c7685ed83263616eccad279b2055b0ce5ad343777d054f949bf469b3d753d12eac838275c1046d403b1b95a9eca32a8a133c87a679bb5fe79a47e781bca1e3d57e5961f2b94d", 0x7d}, {&(0x7f0000001000)="e0e52a57c57e90008b7cc06742cc621c47d73d975e3d119c4228e6451802769814fd23bca941a88d6a3dbf715429220303739a5fd9a2f6aacac55362f5a30420817352ddf6eda66a52e20942baebcad8552f7ebe7ed7297ab48eba7e986d", 0x5e}], 0x7, &(0x7f0000001100)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x8001}}, @mark={{0x14, 0x1, 0x24, 0xc}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x6a}}], 0xc0}}], 0x4, 0x4008800) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x3c, 0x5, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}}, 0x4) r5 = fspick(r0, &(0x7f0000001400)='./file0\x00', 0x0) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000001440)) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000001480)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) r7 = semget$private(0x0, 0x2, 0x601) semctl$IPC_INFO(r7, 0x4, 0x3, &(0x7f00000014c0)=""/205) socket$inet6(0xa, 0xa, 0xffff) connect$rose(r2, &(0x7f00000015c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @bcast}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), r0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000001680)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001640)={0xffffffffffffffff}, 0x106, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f00000016c0)={0x4, 0x8, 0xfa00, {r8, 0xcc06}}, 0x10) r9 = syz_open_dev$evdev(&(0x7f0000001700), 0x3, 0x725081) ioctl$EVIOCGBITSW(r9, 0x80404525, &(0x7f0000001740)=""/55) writev(r5, &(0x7f0000001840)=[{&(0x7f0000001780)="1aa978667ad71ac9929fc20cb9e3f5a15d653c3d96349dc9d0c128387005aa4610065a010c19cc81dd4f57091129f321a4bc0399cbc4fd36aa90b73a7ee7672a69364489c884f3a7d5d7215e9e8fa8582ddda34d86ea626aefc46d8f25cab6ee1d8d641e5923261b9507d0044b8bb742a85d45c7d383c380b65cfd659f24d8c9afc1e73e454a7800824597f207523e4e1e0b1688825df402430a96", 0x9b}], 0x1) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000001c00)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001900)={0x2a8, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa6bb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe2}]}, @TIPC_NLA_SOCK={0xa4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x972a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd5, 0x3, "88f0f9c2c1c1469fe6dc15059834b5e65d62ff292015e822cd60b93202da830b73d0d8a926aabe3994c5852233e391ef60a9299268c842d160f553d1196028acc56732ca54fe9ec759816d2a096ae408cb1cd934c4ad5ae05bbec5165fe42f9f35c75f9e32f5de9df638fd668e36a24c012fcda3a968bf0f36daafc8bfd656036010d8e68a8fb066a95a2567f09ce523ef861bddbc11fb6d0803013d97cdeab4b5f6a3f2fb26c2e683965166ef2c1b74c4739d87e1572c3e9f6830c58974256e18396094013e784b8e64a6ff73506c78b5"}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x25}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x40088d5) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-socket$nl_generic-mmap-mremap-syz_clone-mmap-syz_open_dev$char_usb-openat$pfkey detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x10, r1, 0xfffff000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x200800, &(0x7f0000000080)="7f593f52f82c40cce97b14454d1bc7af21f23c71fa", 0x15, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8296632bbac009c8c0a82746562ae178b96c50f0433d33d0b55bf51010c8726a65a82e4bb6da4a5178287bcc62e876ddbd7ea68498e2eb795437dc8a5d122c0e7612f3d214b80b1580cf1ad96a5096a19da83bf85cdeeab2108966ef35d10cdd6bab8317e81a2486c6ca246a3d9bbeea3c1048bf578ecb92864257f8d2164154b6ffa5e6eeee8bb3884724b25688d9d9fa1e98cf6977e0af2ecb78df02df16eed2232867a8a28128ff5095e5bf01d1") mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) syz_open_dev$char_usb(0xc, 0xb4, 0x6) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-socket$nl_generic-mmap-mremap-syz_clone-mmap-syz_open_dev$char_usb-openat$pfkey detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x10, r1, 0xfffff000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x200800, &(0x7f0000000080)="7f593f52f82c40cce97b14454d1bc7af21f23c71fa", 0x15, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8296632bbac009c8c0a82746562ae178b96c50f0433d33d0b55bf51010c8726a65a82e4bb6da4a5178287bcc62e876ddbd7ea68498e2eb795437dc8a5d122c0e7612f3d214b80b1580cf1ad96a5096a19da83bf85cdeeab2108966ef35d10cdd6bab8317e81a2486c6ca246a3d9bbeea3c1048bf578ecb92864257f8d2164154b6ffa5e6eeee8bb3884724b25688d9d9fa1e98cf6977e0af2ecb78df02df16eed2232867a8a28128ff5095e5bf01d1") mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) syz_open_dev$char_usb(0xc, 0xb4, 0x6) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fsopen-fsconfig$FSCONFIG_SET_STRING-openat$rnullb-sendfile-ioprio_set$pid detailed listing: executing program 0: r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x142, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) ioprio_set$pid(0x2, 0x0, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fsopen-fsconfig$FSCONFIG_SET_STRING-openat$rnullb-sendfile-ioprio_set$pid detailed listing: executing program 0: r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x142, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) ioprio_set$pid(0x2, 0x0, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndseq-write$sndseq-readv-creat-mount-memfd_create detailed listing: executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r0, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/250, 0xfa}], 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x12c) (async) mount(&(0x7f0000001400)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000080)='jffs2\x00', 0x8002, 0x0) memfd_create(&(0x7f0000000040)='/dev/rnullb0\x00', 0x7) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndseq-write$sndseq-readv-creat-mount-memfd_create detailed listing: executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r0, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/250, 0xfa}], 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x12c) (async) mount(&(0x7f0000001400)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000080)='jffs2\x00', 0x8002, 0x0) memfd_create(&(0x7f0000000040)='/dev/rnullb0\x00', 0x7) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open-syz_usb_connect-socket-getsockopt-syz_clone3-ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF-creat-mount detailed listing: executing program 0: r0 = open(&(0x7f00000001c0)='./cgroup\x00', 0x200c01, 0x157) syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000056544820e1050804112501020301090224000100000000090400"], 0x0) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x271b, 0x0, &(0x7f0000000000)=0xfffffffffffffce5) syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000000)={{@any, 0x80000001}, 0x4f2f, 0x9, 0x401, 0x8, 0x7f, 0x80000001, 0x0, 0x1}) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open-syz_usb_connect-socket-getsockopt-syz_clone3-ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF-creat-mount detailed listing: executing program 0: r0 = open(&(0x7f00000001c0)='./cgroup\x00', 0x200c01, 0x157) syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000056544820e1050804112501020301090224000100000000090400"], 0x0) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x271b, 0x0, &(0x7f0000000000)=0xfffffffffffffce5) syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000000)={{@any, 0x80000001}, 0x4f2f, 0x9, 0x401, 0x8, 0x7f, 0x80000001, 0x0, 0x1}) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-fadvise64-mmap-setsockopt$netlink_NETLINK_BROADCAST_ERROR detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x20010, r0, 0x93771000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000040)=0x8, 0x4) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-fadvise64-mmap-setsockopt$netlink_NETLINK_BROADCAST_ERROR detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x20010, r0, 0x93771000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000040)=0x8, 0x4) program did not crash single: failed to extract reproducer bisect: bisecting 59 programs with base timeout 1m40s testing program (duration=1m54s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [28, 5, 4, 28, 6, 4, 4, 6, 7, 6, 16, 17, 8, 8, 23, 8, 11, 16, 4, 6, 6, 30, 5, 4, 20, 5, 5, 5, 9, 11, 13, 20, 10, 8, 8, 12, 21, 40, 11, 10, 4, 30, 18, 5, 14, 16, 10, 13, 11, 10, 12, 9, 30, 30, 5, 6, 17, 17, 13] detailed listing: executing program 1: syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000001c0)=0x1fff) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000380)={"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"}) (async) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000380)={"f9bef8d1aaeadafa287efdb9450ae3e2d260489591c42ab93a0c7bca18e9a19fa8e6cd61e9f62f91123f1311f81f85b4044554cb6e3ca1b6d1fc011bd71bdda82f37ccfa5b87dd5dcd311dbbb67f240dc02c53b7eabf3651660ce801e3878538da8bb24e1dbc480dae36207bf6b7b946c7a8ec08468f9a75ec797b8c11807655272833a7c70ccfc9a8259e7a148eca4d16b6ff519973a20b65f91a7261cdd2440a5a0566d843fa334b0280f0aacc3b417322b9b56098dd842c44139da4bd1e2212a40ba043bd72b995b172b26b71d434e9f3bf74b4ed480b264e0e9d6f628732534db36bfb92ee6419fb244db44abf0cd9357755ce9c4c9a584e5eb89ffd10c8a6c3c6115265f25f798570751917cd7cfc2ca71729e268c3b30c05b3dfdb18cbbfd3036a889f5fefb0f9d56bf970bdbf2524f8e435b721c809e73a5fdafbf1594088ad1974908bf5fc752d564c1a4989a7d1e59564567d9b437442c5c1cfec93526395d18b1ecb18dedd713ced403a00a2cd27b2dc857808287ea88157b3c19075eb33f7cc60a6161a88ad37fb04d0ce0fda24176406391a5ac521299143bdf59a474a17272105e55e9870cec2942a6705993e821e54441c877a64450e739b1321ad17e1ed552e65654bbfcc8ebd1d64fc4e888609a90410f780fe5031c27737f2de05a7ddf00129eb746a2e990438d9bf6a3211779707d615d79111b3fe71c26433482306ce7563c11cdf6f8da283ae147311465af80ba5350e6d65438cd5a20ec155d78227e5336d504f8f1145f4b942180f7ba6e5c9a070d4e31289d4845229780e53713090e782a75b32729c10da28c1f2702dad57a37416fc138040064347a0a290803f51a619402d88d0a4b2bef39bf92696b6d7052459a78a258edfe2e66f2e10a80b168b483c90a1a1dd67c6d6c9b7a2336d1678131ca38552d9acff05dcd57f9f4164064b7781d8a8b5507e21edfe35d65d726bf24799535648cd04f3b7e85c3f6762f353a8f65afdc7ba63bc0eb65d7188cb1adee1d8d14c0413458d2ff65093d972ac3696fa12defc0f8dedf2309e1b80fc672205e6ccfc6b494233c4d00b5471cb52d896c73cddee40e5e51ee8a9bbe453a1a7d5b9832cacc5965220145504ccb2a157a7c1d9d718c0bf96cd350ac5ca330c827bedbff299774707f5840a0d954ae39c9421975d48e05d87a1ceddefbecae936e15ffb308364b69eefd345d6200cd128e48c162a4ebd026fefb7cc73e80204b21ff30d63e8707292f60682c6f6a587fff9c5a0fae24e0406df5363c7c9d31f72829b6a9d9237a84e83e22c33bf6313ee4072f09f9c6254d0eb7239d51cdda77b8e3d42a89449a3e1b6be8953a27651486383879490486fd11b6ac4e1b86f8a71fc294e0ebf572f4ef00582be189ee5a38c18d4d51cd3221fb1475a56cdf3cc7258bf8c559bf1a9"}) setuid(0xee00) (async) setuid(0xee00) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000040), 0x4) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x6000, 0x3, 0x0, 0xeffffdff, 0x0, [{0x2, 0x0, 0xfc, '\x00', 0xfb}, {0x3, 0x9, 0x82, '\x00', 0x7c}, {0xfc, 0x12, 0x4, '\x00', 0xb9}, {0x11, 0xb, 0x0, '\x00', 0x7d}, {0xfe, 0x9, 0x81}, {0x0, 0x0, 0xfe, '\x00', 0x2}, {0xfd, 0x0, 0x6}, {0x0, 0xfa}, {0x1, 0x8f, 0x40, '\x00', 0x4}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0xb}, {0x5, 0x99, 0x2, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0x2, 0x2, 0x6}, {0xc3, 0x0, 0x0, '\x00', 0x49}, {0x0, 0x21, 0x80, '\x00', 0x5}, {0x3}, {0x0, 0x2, 0x5, '\x00', 0x10}, {0x48, 0x0, 0xd}, {0x0, 0x80}, {0x0, 0x2, 0x0, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x4, 0x9}, {0x7f, 0xff, 0x3, '\x00', 0x7}]}}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x0, 0x1, 0x2}, 0x18, 0x3) ioctl$int_in(r6, 0x5452, &(0x7f0000000800)=0x2) r7 = dup(r6) recvmsg$unix(r7, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x100) (async) recvmsg$unix(r7, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x100) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0x268020, 0x0) (async) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0x268020, 0x0) executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) write$UHID_INPUT(r0, &(0x7f0000000040)={0x8, {"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", 0x1000}}, 0x1006) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0x5, 0x4) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="08009e0080"], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000) executing program 1: r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYRES32=r0], 0x10b8}, 0x20000b4c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000200)='./file0/file0\x00') r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x227a, &(0x7f0000000040)) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r4, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x41) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x3, 0x8, 0x6, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000540)={r7, r8, 0x4, 0x0, 0x4}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="4b9d2043623ec8cdf69e7d27beabd13ba97646305134e1c2b946f17064a23ff5db08b34c2bcaf166564f68fb03e804547f7ed5ed5e28a0ce93313e1d75bfbeba494652061bea5f5263872c5b98efbabcb16e82802ae7245e6364cc0b8256c778d3b93d112f51dd80a9dc9070aee25524dcbd3d6011ab46e52b3be84b78098e6096ad2663e2b12bbd4ecd8247d4f0d6bb7ac7a7d47cfad90cd0baa72379c368b101b20e619cf82037b032a9dae33047d08bb11b9e0af2d0b45327c4188c827ff1fb50ff304916a94e4d40a67a9f0fd9797b93d3a2a955", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x8003}, 0x8) r10 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0xa800) r11 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r12) fchownat(r10, &(0x7f0000000280)='./file0/file0\x00', 0xffffffffffffffff, r12, 0x1000) close(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x93771000) executing program 1: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000ac9000/0x3000)=nil, 0x3000, 0x3000001, 0x20011, r0, 0xf6489000) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000180)={0x1f, @none, 0x15}, 0xa) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a700000000000905", @ANYRES32], 0x0) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @any, 0x31}, 0xa) executing program 1: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x20010, r0, 0x93771000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000040)=0x8, 0x4) executing program 32: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x20010, r0, 0x93771000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000040)=0x8, 0x4) executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, 0xfffffffffffffffe) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x400448dd, 0xfffffffffffffffe) (async) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) (async) executing program 4: syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905"], 0x0) (async) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000209000b0073797a31000000000900010073797a300000000008000a4000000004"], 0x250}}, 0x0) (async) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x3) (async) mount(&(0x7f0000001400)=@loop={'/dev/loop', 0x0}, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) executing program 4: munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x1}) mount(&(0x7f0000000080)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x228002, 0x0) executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000020c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) setpgid(r2, r2) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_REQBUFS(r3, 0xc0585609, &(0x7f0000000280)={0x20, 0xa}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10000, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) executing program 4: syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x541b, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x601c2, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x601c2, 0x0) ftruncate(r1, 0x8800000) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) migrate_pages(r3, 0x3, &(0x7f0000000200)=0xffffffffffffff0a, &(0x7f0000000240)=0xfffffffffffff69c) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000280)=0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, @llc={0x1a, 0x5, 0x6, 0x6, 0x6, 0x81, @broadcast}, @nfc={0x27, r4, 0x1, 0x3}, @tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x2}, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0xf01, &(0x7f00000002c0)='dvmrp1\x00', 0x595a, 0xd}) (async) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, @llc={0x1a, 0x5, 0x6, 0x6, 0x6, 0x81, @broadcast}, @nfc={0x27, r4, 0x1, 0x3}, @tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x2}, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0xf01, &(0x7f00000002c0)='dvmrp1\x00', 0x595a, 0xd}) sendfile(r2, r1, 0x0, 0x578410e9) r5 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000140)=0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, {0x6}}, './cgroup\x00'}) executing program 4: r0 = open(&(0x7f00000001c0)='./cgroup\x00', 0x200c01, 0x157) syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000056544820e1050804112501020301090224000100000000090400"], 0x0) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x271b, 0x0, &(0x7f0000000000)=0xfffffffffffffce5) syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000000)={{@any, 0x80000001}, 0x4f2f, 0x9, 0x401, 0x8, 0x7f, 0x80000001, 0x0, 0x1}) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) executing program 33: r0 = open(&(0x7f00000001c0)='./cgroup\x00', 0x200c01, 0x157) syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000056544820e1050804112501020301090224000100000000090400"], 0x0) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x271b, 0x0, &(0x7f0000000000)=0xfffffffffffffce5) syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000000)={{@any, 0x80000001}, 0x4f2f, 0x9, 0x401, 0x8, 0x7f, 0x80000001, 0x0, 0x1}) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000000)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/172, 0xac}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/141, 0x8d}, {&(0x7f0000001300)=""/203, 0xcb}, {&(0x7f00000000c0)=""/116, 0x74}], 0x5, &(0x7f0000001480)=""/198, 0xc6}, 0x9}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/34, 0x22}, {&(0x7f00000025c0)=""/109, 0x6d}, {&(0x7f0000002640)=""/226, 0xe2}, {&(0x7f0000002740)=""/145, 0x91}, {&(0x7f0000002800)=""/91, 0x5b}], 0x6, &(0x7f0000002900)=""/56, 0x38}, 0x10}, {{&(0x7f0000002940)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002d80)=[{&(0x7f00000029c0)=""/25, 0x19}, {&(0x7f0000002a00)=""/38, 0x26}, {&(0x7f0000002a40)=""/165, 0xa5}, {&(0x7f0000002b00)=""/201, 0xc9}, {&(0x7f0000002c00)=""/79, 0x4f}, {&(0x7f0000002c80)=""/156, 0x9c}, {&(0x7f0000002d40)=""/12, 0xc}], 0x7, &(0x7f0000002e00)=""/74, 0x4a}, 0x1}, {{&(0x7f0000002e80)=@generic, 0x80, &(0x7f0000003f40)=[{&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000003f00)=""/23, 0x17}], 0x2, &(0x7f0000003f80)=""/135, 0x87}}, {{&(0x7f0000004040)=@isdn, 0x80, &(0x7f0000004340)=[{&(0x7f00000040c0)=""/147, 0x93}, {&(0x7f0000004180)=""/133, 0x85}, {&(0x7f0000004240)=""/251, 0xfb}], 0x3, &(0x7f0000004380)=""/63, 0x3f}, 0x5}, {{&(0x7f00000043c0)=@nfc, 0x80, &(0x7f0000004640)=[{&(0x7f0000004440)=""/233, 0xe9}, {&(0x7f0000004540)=""/215, 0xd7}], 0x2, &(0x7f0000004680)=""/4096, 0x1000}, 0x3}], 0x6, 0x40000020, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r2, &(0x7f0000005880)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000540500000e0002006e657464657673696d0000000f0002"], 0x34}}, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x112) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010023010000fcdbdf250200000008000100", @ANYRES32=r6, @ANYBLOB="96eeb28f64d988341a545a6b222d93b70c052ca07b2da2944f0f1887bebc9971aeab79d933cd75a4648f2d2d2782a20f2f9f21bbedacd396b1b4820503f9f7e34e6efef17fe107db0e06c68a320c2816125ed23fc47e9e"], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) write$nci(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="c0010421f9252ea3"], 0x8) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) ioctl$BLKFRASET(r9, 0x1264, &(0x7f0000000080)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r9, 0x5708e000) executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x138) (async) mount(&(0x7f0000001400)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) executing program 3: mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='bfs\x00', 0x200000, 0x0) chdir(&(0x7f0000000080)='./cgroup/file0\x00') close(0xffffffffffffffff) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/157, 0x9d}], 0x1}, 0x10060) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000000)={0x67, 0x0, 0x4, 0x2000, &(0x7f0000b2c000/0x2000)=nil}) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="00a2a4b585b2f8660ebd0230bcea44ff7dbd0b342790b332d8c143e800"/43], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@newchain={0x3c, 0x64, 0x300, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1f, 0x4}, {0xd, 0x9}, {0xffe0, 0x10}}, [@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1ff}]}}]}, 0x3c}}, 0x4004055) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x13) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r1, &(0x7f0000001380)=[{&(0x7f0000000080)=""/230, 0xe6}, {0x0}], 0x2) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x13) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) readv(r1, &(0x7f0000001380)=[{&(0x7f0000000080)=""/230, 0xe6}, {0x0}], 0x2) (async) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0) (async) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="08009e0080"], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000) (fail_nth: 3) executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r0, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/250, 0xfa}], 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x12c) (async) mount(&(0x7f0000001400)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000080)='jffs2\x00', 0x8002, 0x0) memfd_create(&(0x7f0000000040)='/dev/rnullb0\x00', 0x7) executing program 34: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r0, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/250, 0xfa}], 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x12c) (async) mount(&(0x7f0000001400)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000080)='jffs2\x00', 0x8002, 0x0) memfd_create(&(0x7f0000000040)='/dev/rnullb0\x00', 0x7) executing program 6: newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r0, r0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0xa000, 0x223) openat$cgroup_subtree(r1, &(0x7f0000000000), 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000002) read$FUSE(r3, &(0x7f00000048c0)={0x2020}, 0x2020) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000200)={0x18, r4, 0x1, 0x0, &(0x7f00000001c0)=[{0x0, 0x3ea4}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x6, r4, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x3ea4}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) r5 = shmget$private(0x0, 0x11000, 0x0, &(0x7f0000fec000/0x11000)=nil) shmat(r5, &(0x7f0000fed000/0x4000)=nil, 0x7000) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f00000024c0), 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x9}, &(0x7f0000000040)=0x8) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100), 0x10) ioctl$KVM_SET_PIT(r8, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x4003, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}) capset(&(0x7f0000001680)={0x20071026}, &(0x7f0000000180)={0x7, 0x7, 0x7, 0x10001, 0xf}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r6, 0x7ac, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) executing program 6: socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x4a) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) executing program 6: syz_open_dev$dri(0x0, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) (fail_nth: 6) executing program 6: r0 = socket$can_j1939(0x1d, 0x2, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0/../file0\x00', &(0x7f0000000300)={0x410102, 0x0, 0x10}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000002c80)={0x2020}, 0x2020) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000180)) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r4, 0x2, {0x2, 0xff, 0x3}, 0xff}, 0x18) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x60, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb24}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x41) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) executing program 6: socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x4a) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) executing program 6: r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x142, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) ioprio_set$pid(0x2, 0x0, 0x0) executing program 35: r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x142, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) ioprio_set$pid(0x2, 0x0, 0x0) executing program 5: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x2}, 0x8) set_mempolicy(0x3, &(0x7f0000000200)=0x6, 0x5) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000001080)="2b97", 0x2}], 0x3, 0x0, 0xfffffffe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) executing program 5: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x501e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xc3a51000) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x2, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) timer_create(0x6, &(0x7f0000000140)={0x0, 0x2, 0x0, @thr={&(0x7f0000000080)="ff5144c5d0c054a4fc6c400ce03a8bc563f5b19b479f0c75582b47a22e1e0765a2ba891423b77b94c99fb6a869857dd8f7ded032a8256868a4a8a7f3ce557ddfd6c530e4c843441d4612b30139565de870a8924128f420b21e1f2a5e01d0e5c3f8330a14690bbfec10bf22fd6105b5b5a2137475d2566d685dd3660dbfd21507c95af74ebda65264df1472d78a26a9127fc6b9c963fdba", &(0x7f0000000000)="bb470bca9d2bf74191c4b8d5f3a23f0ddde01b501cb4dbbb2ad9f7e13375034401277a1ca9e291b8932267535dbd8490"}}, &(0x7f0000000180)=0x0) timer_getoverrun(r2) executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) listen(r0, 0x0) (async, rerun: 32) creat(&(0x7f00000000c0)='./file0\x00', 0x12c) (rerun: 32) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x2000c050) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r1, 0x89f1, &(0x7f0000000000)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="edff28bd7000fedbdf2513010000000800037c455019d91d4d93f55a0cfa1a2f02e334dc32951fac64c7cb407fd5e47abacc7cb78cc0fafd55fdfd8962b3b466889edd35ca60a99fd14f74b04f5c31efefcf98e4ef842405f732dedc0cf1297083140f2e890aed80230f59df08b0c013d282d06f033a53b6a770fadb19af67eb34e71e27ea7dcd9b11dea328e080f9fb00c1bfbdbe924f6507601e743599d6711b45866cc4a00127ccc9fca084943e3745842836323de58af9ee4c6b2ba489de62c8d3997335ca9422289e2744663599800223c8c060ffb52ca43d5e8be8152ab5a1f441a19ec73d68562fea96a51d4e55283b523476", @ANYRES32=r4, @ANYBLOB="040013000a000600ffffffffffff00000800bd00008000000600b500670600000500e40001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x814) (async) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='rootfs\x00', 0x8002, 0x0) executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c0800034000000004cbbdaeb00a0001006c696d69740000001c0002800c00014000000000000000640c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) r1 = memfd_create(&(0x7f0000000ac0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x01\x00\x00\x00#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x00'/137, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_usb_connect(0x3, 0x4e0, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xfc, 0xde, 0x6f, 0xff, 0x19d2, 0x1267, 0x686f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4ce, 0x1, 0x7, 0xa7, 0x60, 0xf9, [{{0x9, 0x4, 0x40, 0x2, 0x9, 0xff, 0xff, 0xff, 0xa, [@generic={0xe2, 0x21, "0c4bf3fc8e73f2fbc1870eda53474447b194dd10866558d303045f40d453d87f3dbbd658859b86ed4db46613b02627ab94df20d76eea19db3db0c42531f29f93d0a128b2bc610d41db96c76ef1199254f3a764c3f504898c5de03acdffe967380b6c77690a1db5fc656e66b7c409f55b2f4aa5303ffd018fd67d0f039132a27ce622aa5a9e9aaa4c89a9dd450ab8c05d13585aa462a373d9573d356d1a7c4fbaa72019ccdefb997fe071eda3eb2aeef0d4545d192cce927436f39e57959dc4682e82e7d0af463667bb8ab82e9a50a7a3920f4e845d16c0c2b5b95777ae973800"}], [{{0x9, 0x5, 0x3, 0x10, 0x10, 0x8, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x47, 0x7}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0xa, 0x0, 0x81, [@generic={0x62, 0x22, "7b06d582cbc6b9bbba71340adf799dcd42253147bf3e3ca73a0e3ec31ff58a4bf6c03b549095a109433c93fefd769a61ea3659280adba6cf49d3b9960fba38c75c7b215fce5272e63d3cb7f0ecf59427a1e5287dffdab96202f4138209127277"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x2}]}}, {{0x9, 0x5, 0x0, 0xc, 0x8, 0x9, 0x5, 0x2, [@generic={0x93, 0xc29a6c33c9272b2d, "546d8443e3cfb2c314f20d980bf4416bc7dd76ddd89d12cffc49f6caf5a8316b5e006fc606bc16cf939d1c396f09acce96562c1dd11783c2cdd40ae68ccc23f943e09c74c704e435f0a53dda51c7518e0e08c0445a123417518c63709da5a149fa56f266e6a3b58eb44dc7368ddbb0b2de8981145fc9acb0fe698b716ec29eee737977c85c90a61901000223c8e7f0ff03"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x20, 0xff, 0x41, 0x6}}, {{0x9, 0x5, 0x3, 0xc, 0x10, 0x3, 0x2, 0x0, [@generic={0x71, 0x4, "2c39e9c95f5d10b095a5096e79f1f0da241dc5438ec1970e2ff976c62169bbca6acafd6e34c0d524cedee08cd0419843c746db80183dcd3f64adb5b925c02066615d574fc640fef9eb3aca1f53c15e39f175a5baa413ac6c58064abc57da5c15cdbde7a789451e1274789cf5da5181"}]}}, {{0x9, 0x5, 0xc, 0x32, 0x200, 0x6, 0x9, 0x5e, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x29, 0x4db}]}}, {{0x9, 0x5, 0x3, 0xc, 0x0, 0x2, 0x80, 0x5, [@generic={0xf4, 0xa17a91a0f607cf92, "a6f267014eac54464a1765fd91ac46babf49f2a1ab20227fe0f8fffeac9b10d8f27d2dbde2760247f47414b108fd1f7584be1450678e795e006654ec28a406e41453db117d45cf1e3491e1e1e9908581593117458c29cbc1a7a6126186cecc8264693a29f0c3db5bd19fcf34782fbecc97385eeabc56fc9a6de049d4100e8bcf31e4eb28b7f363c080a12afcfc7d59d9869ada8992146271f5549edfa8ef3a2b7aa5ee94478521e0e29085d9c1b1d631e645c5ba15791bc756743d433b21bc881817fb74abbbefc5136d20f9c6739c016a81000fa128385d5318dd586755260af3422cd9293d098d8d4ed0700e0b4681e74d"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x45}]}}, {{0x9, 0x5, 0x1, 0x2, 0x8cc5ac6fec5fe40e, 0x8, 0x45, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x6}, @generic={0x4a, 0xe, "bd9ac2dbc999cea1858733ff2bce00be85444e47f8f407b69c45500805341fa392e4227d6dfd19686cf97ba735746a0934f82931e9276498d485b55aab1d75eedd7f887dc00b0909"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x3ef, 0x6e, 0x9, 0x4, [@generic={0xb4, 0x8, "97524da6221164405cc5505f780e5a757ee65209701a6660037180c5274382ca765e804ebdf649b27e7b668d55f55c30778b0346cf2b575c862059767652fe86c4692a85a0fd59a36d10472d0accfff6856c1a04eb1d197916f6cfb315a62c570e097408d20aef3fc20945ca494a55f96e31e5e7386f135f0ef3cb16b28051cec1f996566626cefb8955afbc9ff6cecfbd78e7aee0911cbdbce1f169c58b6c7969ce319a1d4ed9cd7d1790cb926bcbfe0d91"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xf}]}}]}}]}}]}}, &(0x7f0000000a40)={0x4c, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x7, 0xb4, 0x57, 0x40, 0x90}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xe, 0x30, 0x2, 0x1, 0x2, 0x2}]}, 0x6, [{0x23, &(0x7f0000000740)=ANY=[@ANYBLOB="23034a2aa663d27bc00800000000809000999d5c511000"/35]}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x282d}}, {0xa7, &(0x7f00000007c0)=@string={0xa7, 0x3, "17a6333827292f6d0a2fe59a1a1820f9e14e8b682c89870e9d688eb0a70cde8d8316c87989432ec1900983aafa434c92dae69d319f705fecb05ebf117579a1ec5dc33c25bec7d3b50ef915fb831ceaf647336765e8c240e5ddb0d11a15cd90b1e2f3054080aecc0aed4a1ab0ccc5dac4c798813a92dbb0a7405355ffba87875d13fa065541c1a4940a9edfa114fb719bf30f1824769fec5f5882f5d724706a897f5843c838"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x411}}, {0x102, &(0x7f0000000b80)=@string={0x102, 0x3, "403decfc6333d61d5ac725e8fc0f8d6e0a2522fe65535674f358e368878b668c80319734490ce82f69aacbb2fd02ef0f17eab16cdb69bbe6a27f6f76c0efc54261f1a215dc90e21b7d02c3f597066b04ab4b698aaf0856f3ace6600cdac2b3ffc181bab152f6ff5a74e54940c699c3a1076e61a6d9a8160710500d493d0cfc53b98c42dfc77af3adc1c7f84f3c938ecfe8ebf0f72deb68d1ffc246d3398f23458c3ce0939a12542689fb3d753e33659aacd90000000000008304c1ddfa43c296e40fa209dc8ee0d53a702e10007059cde52aa9d55090e753ace886cef32a27d59d59b8e03075e7ca3b569e39a7bbe3a40c465b3f9ee2932229904850e7a85479"}}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x2b8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9}, 0xe) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x80) write$dsp(r3, &(0x7f0000000240)=' ', 0x1) close(r3) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x46}, &(0x7f00000000c0)=0x8) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) executing program 5: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000040)={0x5, 0x4, 0x1}) fadvise64(r0, 0x92, 0x5, 0x2) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x110000000097a9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x21, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875496364ab192cb8b873aa"}) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x100010, r0, 0x93771000) executing program 5: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x10, r1, 0xfffff000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x200800, &(0x7f0000000080)="7f593f52f82c40cce97b14454d1bc7af21f23c71fa", 0x15, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8296632bbac009c8c0a82746562ae178b96c50f0433d33d0b55bf51010c8726a65a82e4bb6da4a5178287bcc62e876ddbd7ea68498e2eb795437dc8a5d122c0e7612f3d214b80b1580cf1ad96a5096a19da83bf85cdeeab2108966ef35d10cdd6bab8317e81a2486c6ca246a3d9bbeea3c1048bf578ecb92864257f8d2164154b6ffa5e6eeee8bb3884724b25688d9d9fa1e98cf6977e0af2ecb78df02df16eed2232867a8a28128ff5095e5bf01d1") mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) syz_open_dev$char_usb(0xc, 0xb4, 0x6) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) executing program 36: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x10, r1, 0xfffff000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x200800, &(0x7f0000000080)="7f593f52f82c40cce97b14454d1bc7af21f23c71fa", 0x15, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8296632bbac009c8c0a82746562ae178b96c50f0433d33d0b55bf51010c8726a65a82e4bb6da4a5178287bcc62e876ddbd7ea68498e2eb795437dc8a5d122c0e7612f3d214b80b1580cf1ad96a5096a19da83bf85cdeeab2108966ef35d10cdd6bab8317e81a2486c6ca246a3d9bbeea3c1048bf578ecb92864257f8d2164154b6ffa5e6eeee8bb3884724b25688d9d9fa1e98cf6977e0af2ecb78df02df16eed2232867a8a28128ff5095e5bf01d1") mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) syz_open_dev$char_usb(0xc, 0xb4, 0x6) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) executing program 2: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x148) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f6921c2d13357a686d07abb5543643d583a8225ad8cf884cf19b47983a7e100f79f79149a25701321f291a984cd0c1b128d371c370afe932aa7164aab4d34a8a0023f3de2c62d3761f052addca4", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000400000000000000000000000100000000000031"], 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648d000) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x30}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fadvise64(r1, 0x92, 0x5, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) read$FUSE(r5, &(0x7f0000000080)={0x2020}, 0x2020) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x2000004}]}) msgget$private(0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3, 0x2, 0x80008}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000300)={r8, 0x80000}) r9 = creat(&(0x7f0000001380)='./file0\x00', 0x4) sendto$isdn(r9, &(0x7f0000000140)=ANY=[@ANYBLOB="f5400000af000000716b928a57dd9c9dfbd93cabca08038ccfe4e310c3f227a6ff0dd6d225bf8037f7e4422337d6e458ba317186dd6a612e754689098ec0d73228cd3b21f709ef6cc14396a82c6d8340692ecfc5874b767de575a747061e8738c6608a19e74fb84e38a4075f86914a4176850bde8e3369c0ef9b6c1ee078feaccc08d23dbb"], 0x8f, 0x4000004, 0x0, 0x0) mount$nfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fsc']) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000003, 0x20010, r1, 0xa4714000) executing program 7: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) recvmsg(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f00000000c0)}, {&(0x7f0000000100)=""/109, 0x6d}], 0x3}, 0x10020) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) sendmsg(r1, &(0x7f0000001980)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0xb47, @local, 0x8, 0x4}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000280)="dfd2f132443f44aef655e62ce5688eb8b69af5d60131951ba490116c", 0x1c}, {&(0x7f00000002c0)="1f6857fe0d58dda685bdebd03904af8b3e54219947c6355bcb4b407337dbe39143e2f5db81072c102102080643c5365e71cfeefb472315188585bc9c6b4d971a5a98dd8725318a127bea3357e028bcd2eadf4a98210c343495b7d90dcbc86dab15b560a70be2a276749e025f826045eb6a9071722b92d09e4cb904c2cab3c3e457fe17cceb8a9a192e9a85a7209572c59b2c08162d397c60980b13e3", 0x9c}, {&(0x7f0000000380)="921a3cfb9626b5be358f18837ec3eaed8cd61a5415f6835cbeb567f7488808614ae9f2a0098857ab0e6cbb11f2e16bfb9465c893ff89b46ede3b0828bc26c730ef4f8ba83ca800e2abb6ba88761d75f9df7deefdc0962e7c7001e9457385bc222036a6ea4138038b24ab78e23a44f4f81e6da833c5e204643ace72c921c4cd809301ac8f4f5e72e65da7a68748b80a79ba25508113e003a5c77772a95b6b8b5fb6cfab1a087dbc5aa4b00c15d9b78971c61149f21135c563c0c818b92006cf0f13c987e3ee356d9be717e7315935eba73a7bedae8c68d2a50fd7fb5e360d63671e7ea2eaeafe2caa61facee1774587f19a28a7522539", 0xf6}, {&(0x7f0000000480)="b6c3811b225513ade8ffd9e6a56263ad6dfcb25eb178db502d7dad40091fc02e593e98d16e6983a327bfcd97a7d501e64aeb2a47b678ce6ec7f47c9795aa82cbc924dfae979600d0fa5f12d42afb633354af94a44db486797468f7ba84bd44b5946dfca88fbce88716a28437060b9ceab77dff30b6c0b39c4ffa41d5cf5d01a3f04207fd2a747737f4ccfe53b7b42a8d45", 0x91}, {&(0x7f0000000540)="49ec68be2d28bf564ca9aac4dca5da1caccb679699f841b4581f4853becd58d641d41a186c69a0f00aaf527549411e81603925902f6848ff69126ce97db4e8f224b55b4d67ea202ab46ac86733575a6935187cea1c71c92f9395e3c612e002a1fb43c2d8ee6c9d310e14442fe7b76a4cc5dda24b33062e7756c4f80c7bea1b6144de27fe8d3398fbf2da96f86547097d271e23f1068d25b922ab9534cd5c9d1a32b454ed349832f92978734ea04faef5fb795c256cdfc068212fc3b1654ecc0044095b9bfd0375400da65bfb3f6793081f4347a0b670fe1d6f43f2d3ce17ecc0927d48bfa26ab77aba63ca5152aec68839170b9c8ef004c92c7b6b6e5e0235e8692509dd0088cb8807259265966d5d73017adcb74ad56568572f55617f651cf792a6aae48497b8d8e2d4904a3d0341de9264f550be57abd9f495d3fdee2c7c627659589239632d2b04ce4d3b5b46d5acbfa5495dfaf6397e9c9ac76f0dbba01373afd3a23a9e85a933395c5a39bb3c6e2d5bf9918308751aee68b9f43cfc9022d636a4b3952517643db984c124350a213153f2f0857121cd688ec1aee096a03e69ce599fdfb41a8e8bc8bb6d302b93ab7d99d3d38f1e833025d4da6e1c81c6f47dec1485cdbe04fa4eb2c17a74e66aee5658b7449bd7e91ba27054c9f8f1c64480fb94741e63b0083c30714c1266e85b2915206f7f70015f50bc49153c7df67d000785d2900b879974af4634933eb1cc7e69f6043c125cf5836b59e7152a11aa2788f4501f4190e9259be5e9ce7c0dacb37b2ec08608cfbfe37fbf47c83c34f79f4600454a002c7a36f638c440f529a6d7ee904d5e38b6e5df2e5c92dba8801f9928637785ba4d8628475fa415e7d84ddedb456d9a7c52dec97c8c1a2892917e43477465fa23f97fca40de02365a7df15bfbc7d31bdd258177aaa302750d282fd78da159dba69bd53830f5f5053affd657e6b97611a8e4ae236f8fcd4e33cd8eee3f71c23f2c5091456903c12687ce8cd12038478cfc365abf46be3c658f47aecd7d56447734d2dcf53969b910016fee63a4ed9a02441cd3b3d2643ea9b0811a0f7e025508b1692bd7c30ae964eb73f1f75d2df1b15173a9c93860ab835f3ff5d6da04f308b2536a9cdf67994ea83231ee6e28aac11e5fff2d186eb300bb3ca029fc3bd02b3e838922aed012f68ec46d0eaae28e364fc959f5a26497c675dd92cce1cb90d529c0be0b7294f2ff381b829a75dfae4cea22a4b67da8de0a32df6af388c0c905535435b35ac6ca1e697023e2399733bca5fced149e3ecc2eb3bdf44ab48e003649082950c4e5ff484bb9e8d421ea9b501525387000a003b0a64d73852a88f314965218e780cac8888aa2faeae7d0f4cbb5473ef9fe5e3fbdb6a9a5c375d3cd6da46074144407e3726fb17901bf6edcb598023a6ab7e74950b140d8bcbd44cc4f1cd2a89c6f40956a3c5bfeb4e35191738be28e00b232276b2bdff0dd0be3fbb0b64cc15b8ab2d492ed4e954d8d1ea0caf2cdf5dbf0a95f8b15edb32c82e3470d72269c2f9e658019e91665b54a6bba402d9ed3456cc30d8fec0bc575947d729abde93e083cd7f7d577425cfcc3e608a3321f44296459a91c11e3430a8fc6ffefdcd448409b66775b17de93e6214946d2d41238b472a28e0652600f6ae27ee233e92033e34d627fc2585a94e2db01ed38ed2ee858ac57c0a8c96b5310379870569e9c4e80cfa4b6ea88f32c4eca97226f67741c94749af25a1908e5415e4dcb18c434117fd701949a3ba805a18a49efab9226d81eb7467df09a9e8906a3194983516e3a6b60aced844f8798bf7633557433cbf6172b3d8ec937cb493e25a591bdc31d27f7037358af3ab7b010165370f7e6100b081ac71764d99b1c13a4d196d49ccfc32e45aab961fa0350571a1de58b2a45da6e94dd0f319a0425e4b89f746ba9597697505628f802de0322a3862fc40d67b27668e85a57156d183701b7eebbf69cbb2491fea7524f42d2b23339871e4fdc0261af4f673297b7088f21f27485555d35e68585981dcbc06fba4c71b431fd4315d548e429f4a0eb2775ad6bd717f9ab395aec9e57f9c44c06c8efe5e55b784352cb28aeaee8caf3e7b40f949c76c39c27765a3eb95bcb3deb1ed9910a7014b249afbda43048572ff3b92f8b7f39b4bc769d03b78fc8a98272aaf13e6a5fa98adf3a0b635d93d2c30cc2476948ecc74cb276e1f3c5196b32b5310f197046050117265543310f59df7a26e4e3c114585b244f0ffd3a8716539ddb8180862fd6d73a7a168efa6aa2d3c00d9ce66c025ed2e14aaf2a474c8c99b808354a13004d385928c978c253d7f3bb0f059e36e510cfc33d293d7a47a5aabba656a181e188ec78accdf189bd40036f54957a47f944eb0ca0c630695148fd6d53fbdb32a12329a3a1aa9214852990350337bf0b721a3b4b52ac3fbaa137fce7ea5cb60f09363dd59eb396bb68dd0756958eefd5c230c083ee32a009c6c75dda08fe55667189fb509a18e9450bbcdaa7ce9dbbc4f390489596123c6688a2ec11cebb1dc46c679c1522f4c45f5934fc92aa43619408fbf70aafdec24ee687fe12d75a6ad9af61e3e02711d44edf225173137eda31347b1681ef28eade6cb85f80056fd48f543b3079dc968cedd4259f5a40f5cb03d89e10429a2703134af23a923641f15ba0cd54ea0d873ef37f17d5d8ddaec708d71d752f5c9b2227fc0b8803d16275951df61cd7dd0541a254e2c1be5f78ec761eb04c1bbd56865283c0915b89727b06723f1f59a17ed66104556ee126f36f47dcfa99c0f4f7d28a17632cb3d889678319d9cdb1b43a0696cf0e5034e8a14b7106a6f261669c5be90aaaafb98acf150d259f3221323d9ad2a17ecfedfbfa72dbbccebee2d61fb10610cc2b95f43f52edc136a61edd7b3b310673c962bf3a9234bd18a1f602c14bbe23a53ac5829029bd0d4c4ec3335e8daa18da6eb3216bf7e09d4b895a3b65ca30191d0d704ca5894b46e6c5c63e935833359cab19b091ef0d4311b1cd7d9326559756984a4b7f5f2aad627e4b4efd8597e50dfefddaa089dd22ec80cacc004d575fb1cd07e8f71e0e0dd8349c85a0cd3281dc86afe8b5248aed781b6ce7db3fc8b8a77f9d3fdffe1c4df5eac7314c51f1f457819ff76fde7d6444216909ccc622ed9e0e771770066f951454c18a6cba26620a1f3bb876bf4d94e89c0adaf2b44e3c79caf68a8a232cfaf21e9e2e5825192a0d19044f05160f5210acd3e862a7eb1a9eec23e8d72d14ffe5725f8d68343730a1012ecdb34bc507fd82f8ca1d35dd68035bb4be75499c6bfaed40aa997cb39b2afccf537166ebedced03cf5d368547276b476b177d16969999c237324abd6ecf4c5db0d08697ddc8f7c5cd87bfae1d521ae79d4ce555c75df26d4c141f27f8994e9428dad136826a46c2d2a104c6b1ee31fd5584479393e06cda7dba04f2d79b025e186c3295389235a24c4707e3aeae05d8b1fbc4478c51df1f70273c813ee5801c0920be3d7ba5e3885ee355f9be32feab8e0e8cb7f4bb92f2ef147c0453ac376ec25de79dd8d0a44b15dac94b631ea0ef19e2e0cdd43b0c07a101b950831fd38296e770042dd460ddcf5b5aaa9d9bb68a276ca0b894e716a4e51bfc4ab4089801216571e0a0f98a566575ff34c9a5c54dab83437659ed5ae3733d1b304ecb937445609e64f435e5c54dd0683865e4be4879e697f8b8b20ef037a90a509d24263b07123528d37277b7243242bbba21889ba1b60f52bb382ad5ad713ad01559f836eb36703127517d629950dff1625c3596bd3b66a21b475679f8cb7ba65458d96404150251684c860080da5d0684b862072860f0f6f3a4fe998b71ca3b4d695f90d1c0ec9878977eb6f8b29c9606a87a24d3ff236913938a9868374cc44a8e22cc4586ac6ee6ccb83fb2f3e9e1ff707ca5fe344ec86b6c2a7ca512ade1593b799f6a6c2b9f9555f1ca7554fe44eb0b19b77096d934e38c80d3e2846a69f015b5a5f12554770cd6fdb731a17e2b1494f0097831cc7b41f635a30d311865556b9980d517882cb4d3be08929e820f07eb6afc2ce7936e04162fd8bac031fad94784f338cb578d19b37f3d865227bc0a8be654b879f375173aa8708db785b5c5da346566d6625fd28367b78780cf11605b05442e3fd036e0d635780c211c19b412293addd39a258ef85b15d73f40b2ddbfa0348b712b98faf21ecd32db87cbd5d10622e7af08cebfeb7abc214b2fd79d6850fcddb716b3f67b04badb07ea853f453c930fa535b5c35a566d396cfdfeb28c7b88409d1a305f439735f9b7e6c18cf1ce850220c9776aa10e66b3ad064c9f5f043b8b3eb3b7e1747561e1b1e63d2a6b2712d83ed444dac704dfc7488e189cfeb133b48ded49229fc9dcdbbda5c1c74c03b2675fcfa55bf6314b8dd67c8b83f65aa373c5d55c67b0eb6f0a4bef051edb6df1e39cfbc13274f3ef24057adf968fd1bc6fd973ec6430585449829cdbc4a28d17ba3a6a946ea1811df68cec4f6b9b27dff8ba4cbc4d2d76daf4a2b11ddcf3cf5aa4bca4c47cd69b73587459820e625a932165dc42e78df882ced18fdde6f3faa756b0aa0f1b72b942ff859741ed5e6ca7d8e701b406eac1183d5c1b352195af3c335de84e0563dd9e0bab094ce164ebf9de6657410d19d45f28b51342578bf08f9d42ee828cd544280056ce7b79fef8f6e5f317cd2c594a99e88de853b5eeffe60c77d73c4f502b6e247e47ece5948ffb020b97e7d8655f6d07040cc8a6cfbb06ba50ecc415eacf8cc0b59f954243e201e6a6182b117662e65e3bc7c5c70d95c51f9f557aa2597b50b40880ca102882ee88ccc1df4db358d6739e7f7ae54c35d2d1c45070c351f78a05b7adb170b4abf54986b5bc8a94549e4f1ee231bb051bfcf770d7019ffb26097976a1c8f937ffec32481ab8ea9caf46438a6f22d98365935e78f2f60666cb8ee4f69d9a59dd48b3215a35c139b3f346fa754b6d1c11c3d38e3b36d4476ea248990c7d7b8036d9cd7c0394d9143adbe9bf27c4cd5f1aafc9dd689be639583fbb8e6977e101f7c07c00c8ebe984ab9287039812944c8011d0a5fec1d7b897156bd5086585bc06ebddad232bcda7541af6760f03773212378fa037b15b323ed298d9f502cf4512480b93d4914c07ad10c934b7872c8700c8e422b02d72dc1fdd169364785724db3910f3c35736ef27cb6d029a35bb35374b6b1d5d01aca65293101ef1b71c69967fea60bf0d83009d3ec337ab8964fd84670355193c01a2cbefd264cb9a763805a89fb2cccd3eb27b6a2055688bc0946739d3793e095d3dde7bc35bce59f5b2ab3fd57cd26567265ecb050181c2523ce6e502fd9beea462cad1e9c3e6c4a6f833f1bc8ddaf773f1be4996eb5a2a4a6f5f818e8a10c801afbfbe345e18a9c33fb9adc13fa9bb837431db0e8d1e476ed4fc9f272caac7f75c3dee920c9ad9fff2b937eac7a7a2c8b289af52c7f04d971b5b431f2b9561312184e216a18f5bf4ec2e1c05f60788be75169dfb5ded475a4b45a1d55e82571e115bc521100322f11b8007bee74a8d49dc16b9c5a47bb83e4614b13598cb0fa6971a85efeb5a871b5fc5225d76a544ea0205cf9a242bba5ddc24ad3a3b5d83137dd019ff88d740cba8df865db96d444d8805b24e0e2c815173cddac83f08377f983ddc1e38d6329bf92745b2903b1d471086b4ff61cb393f41e88e1199cd5338b92de8c0ccaf334306e8dc3e99a3487948b75910f8b6187fac1430e92", 0x1000}, {&(0x7f0000001540)="77f27c7c31d9d1313826f4bc3c694d9b29e5f0601becd3b7356a54d0c4a229fb1ea3fb0bff52aa8a13c2dafb071627c01ab4f74e91747f7f611b68cb6260e7bfa3754c2485f356bddcdf528bf12b07e857c0d7ea13e765cab0f8be7e97e91edc206b4c21c64c5ce49421bb1a29e3a6bdbc9b3e2d8c932a77f713d60adada91245d0e1729ece0a01644521e26e68c498a6faa2110bfefec1b93d8744d28528008728d49e999f26fb0f601420310edc998ac09ea95eb70003c7dc71c3b90dd6e0105d652c45a28673b62", 0xc9}, {&(0x7f0000001640)="e9b864f269753aadeb86e9167d33492531fa1e7b399a396d3e118d792d5c1c2eed0a75063c5f7f1207c561420c76dfc3157c5b4eb452899bddc833c508554a3f3b5fa939f12e9581d2b995db78abc32c501cff207811a2261c008c2fe2e867ac9eebf89c610a544b231c77ce5882120ad5c5006decc8d2948cfdbfef03a03631a912d727db880fbada2797fdb2d5f73a2cfeac22e453a31dcb9e8398c64bd5d17932a1561f3e1b35f3abc24a335d132ee5d5621b819a845ef7393229a38a91828455061d4cf80443a8f0b911ccf88311e03c9f5ba3becc8c28b4af3bdd7499d4ada1de6759db6dfec86d671465", 0xed}, {&(0x7f0000001740)="eb365fabae695bfb961da012f57d430ab039b10bc27172ac0c15ab4b9daede277a99b2cd6412d3396293f89e12d05821908649be9b9593dcaffab66a3c772fc0e4c53cace43eff77a07bd21cd005dcba59e9c034cf0f76697da6de4a01e501cd2fbed6a2bdceef780f35e3546eec06ed3001f07028e3609842cf94804d6bca8048731e842f409761161650a73ce645fca5094d95f96259e2", 0x98}, {&(0x7f0000001800)="bab047afc907f6db4f1957044194ac59cf23a69133a47a99d507d5b3be099f55b9021b1b9974a22ec0f91a491b879d35d60c0e591a440c967dd079e915d377b994440c56f3e26c15aa93981d8a37ffad95f11f83753de725f71b7aa8df738d7f5f349bf330becc7dffd3a5fd334b2452fb35206b487c92f41b46ec96e78fc0959725cb881d", 0x85}], 0x9}, 0x0) ioctl$sock_ifreq(r1, 0x8947, &(0x7f00000019c0)={'syz_tun\x00', @ifru_map={0x9, 0x6, 0x5, 0x1, 0x1, 0x9}}) sendmsg(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001a00)="d3eae8a1b750e3ed406d97c8eac60a21d3d192e5e14114d0d3eb8594b13f18f87bdbfef84b6087b81238e84e7d2a0a62509ea9d049c2dc6a9ab88abe7a5be3ae529e2677595d1e1ba95b78005802e883fd37ab53b38d10fa86ea28b030cc7daed8d6fa2988d27ae7d3e14fa39a12e7a9fbcfbf95ce38a26ac7ba846d3f90cb4e666c37fe6c8e581f182ee0457a8245a30e76139366bd347b3dff05ba94f032a353f7b1cefd606ae859b073e90a0a4abe98737df72645aa096d6d6360229d3deedbf0df0e6f8559494e511ddead75", 0xce}, {&(0x7f0000001b00)}, {&(0x7f0000001b40)="e93822b74d0d73ec5faa071f1d434f45bdf9e721cdb501541ec7df44124b47d88a8b00105bcb225277e797bae4479a363310fe8a1766770c580d5111ca690788b3adce26f8f1a649d4ad377dcedfe63d307ff0f3f84d8437611551eb31de6ef6975d30e0d9a2be320c19c09e3e00995f3a85390c2a7e7ec66a5e99e226f319f9932a63fad50344383527115eec7bde899eb57312c8b6a9ff53ee9a6d27e70bde7df6be81d503e34014c3f547423d9f54151ca36cea102ea3f16ed062af7c8388a6a9", 0xc2}], 0x3}, 0x0) ioctl$sock_netdev_private(r0, 0x89fb, &(0x7f0000001cc0)="e10aae4736e4e7a30b9e2107fc1cfe2a0dbe12dffe7da113d3b02961c6a2e11092201cb7860a628e14e47c94b364925db45c7eef9fe01f04db562e4478ab30798896f24324a95442fddbaf186b960a9d264b3a42882385d9c637bf27f4401a97a0514b8d94ee306cec31693069d293f86b279efae8f9592a9c20d8785644dd320457ef87d1dc5a8c132dcf3bc5b8ac10a859d99b747e5b2d1d820ee54e614db24ced59ff3fcb0d20440ca705b44cd82bddaf202c6dcc0e94d1497717a4676dcc2efe4048e52f7e61c0cbb38646fd4d4a5a3e6be6164825e0573e05aed1babe51606a1e2546e6eb0ee816f2863e2575cea8fed51c2300") (async) ioctl$sock_netdev_private(r0, 0x89fb, &(0x7f0000001cc0)="e10aae4736e4e7a30b9e2107fc1cfe2a0dbe12dffe7da113d3b02961c6a2e11092201cb7860a628e14e47c94b364925db45c7eef9fe01f04db562e4478ab30798896f24324a95442fddbaf186b960a9d264b3a42882385d9c637bf27f4401a97a0514b8d94ee306cec31693069d293f86b279efae8f9592a9c20d8785644dd320457ef87d1dc5a8c132dcf3bc5b8ac10a859d99b747e5b2d1d820ee54e614db24ced59ff3fcb0d20440ca705b44cd82bddaf202c6dcc0e94d1497717a4676dcc2efe4048e52f7e61c0cbb38646fd4d4a5a3e6be6164825e0573e05aed1babe51606a1e2546e6eb0ee816f2863e2575cea8fed51c2300") accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001ec0)=[{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001dc0)="f527ad885c200cde112cdd1909dade6ba2c41fa5bbdacd3d37e10c52932880274e4f22eb6b1ef34261faa33c9cade245d8d836a221fd15f3b36a998ba98178b1ea0d78c895961b5b23405e4697721b0af4a83096f9dafba17dff0be2c89461a47aba3d8f3a6884cd3edb728bb2", 0x6d}], 0x1, &(0x7f0000001e80)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xa}], 0x30, 0x4804}], 0x1, 0x90) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001f00)={0x1, @bcast, @netrom={'nr', 0x0}, 0x9, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8f53, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001f00)={0x1, @bcast, @netrom={'nr', 0x0}, 0x9, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8f53, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$int_in(r2, 0x0, &(0x7f0000001f80)=0x4) prctl$PR_GET_FPEXC(0xb, &(0x7f0000001fc0)) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000002000), 0x4) (async) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000002000), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002040)={'xfrm0\x00', 0x1000}) setsockopt$MRT_DONE(r2, 0x0, 0xc9, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000002080)={'veth0_macvtap\x00', @random="deddc1abb688"}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r3, &(0x7f00000020c0)="ca08a318dab76b1a73b34c1b41a62d7a8b01819e6fefc66f92f5bcc0fe797ebf66c2616643b3714517b2ba1094777c0f752d286da86a7671369bd7f51544cb12e12358073e171118a4cf25d17d49667af6714219bb3af6dd405f84f183b7f957297cf92680871319e04b6ab2c14133998c6b77d0775f", 0x76, 0x400c4, &(0x7f0000002140)={0xa, 0x0, 0x80000001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x824, 0x3}, 0x20) prctl$PR_GET_FPEXC(0xb, &(0x7f0000002180)) socket$inet_sctp(0x2, 0x1, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000021c0)={0x0, 0x2}, &(0x7f0000002200)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000002240)={r5, 0x6}, 0x8) signalfd(r4, &(0x7f0000002280), 0x8) (async) r6 = signalfd(r4, &(0x7f0000002280), 0x8) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f00000022c0)={0x8, r4}, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000002300)={0x1, 0x0, @pic={0x6, 0x0, 0x6, 0x5, 0x7, 0xf8, 0x4, 0x9, 0x3, 0x6, 0x3, 0x6, 0xf, 0x9, 0x1, 0xfa}}) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000002540)={0x7}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000002600)={r5, 0x48, &(0x7f0000002580)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e21, 0x300, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x567}, @in6={0xa, 0x4e21, 0xe3, @mcast2, 0x2}]}, &(0x7f0000002640)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000002600)={r5, 0x48, &(0x7f0000002580)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e21, 0x300, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x567}, @in6={0xa, 0x4e21, 0xe3, @mcast2, 0x2}]}, &(0x7f0000002640)=0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000026c0)={0x1, &(0x7f0000002680)=[{0x2, 0xcf, 0x8, 0x7fffffff}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000026c0)={0x1, &(0x7f0000002680)=[{0x2, 0xcf, 0x8, 0x7fffffff}]}, 0x10) executing program 7: mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) listen(r1, 0x5) chdir(&(0x7f0000000080)='./cgroup\x00') lstat(&(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) setxattr$system_posix_acl(&(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [{0x2, 0x5, r2}], {0x4, 0x7}, [{0x8, 0x4, r3}], {0x10, 0x6}, {0x20, 0x1}}, 0x34, 0x3) executing program 8: r0 = syz_open_dev$evdev(&(0x7f0000001740), 0xe7, 0x100400) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000001800)={0x1f, 0x2, &(0x7f0000001780)="1878"}) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x20a02, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) (async) read(r1, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r2, 0xf648b000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) executing program 2: mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0xa, &(0x7f0000000080)=[{0x0, 0x6, 0x2, 0x6}, {0x7, 0x5, 0x4, 0x3}, {0x8, 0x40, 0x4, 0x8000}, {0x7, 0x7, 0x9, 0x5}, {0x401, 0xbd, 0x3, 0xb}, {0x2, 0xff, 0x2, 0x3}, {0x96, 0xff, 0xd3, 0x336}, {0x800, 0x74, 0xf9, 0x2}, {0x1, 0x2, 0x8, 0x1f92}, {0x200, 0x1, 0x3, 0x5}]}) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0xa, &(0x7f0000000080)=[{0x0, 0x6, 0x2, 0x6}, {0x7, 0x5, 0x4, 0x3}, {0x8, 0x40, 0x4, 0x8000}, {0x7, 0x7, 0x9, 0x5}, {0x401, 0xbd, 0x3, 0xb}, {0x2, 0xff, 0x2, 0x3}, {0x96, 0xff, 0xd3, 0x336}, {0x800, 0x74, 0xf9, 0x2}, {0x1, 0x2, 0x8, 0x1f92}, {0x200, 0x1, 0x3, 0x5}]}) (async) executing program 8: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffff7, 0x4}) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[@rdmsr={0x32, 0x18, {0x84b}}], 0x18}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.pending_reads\x00', 0xd0080, 0x51bb01b75ea792b) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x10000, @dev={0xfe, 0x80, '\x00', 0xf}, 0x5}}, 0x2, 0x7}, &(0x7f00000001c0)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000200)={r3, 0xe}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x5, 0x0, 0xeeee0000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000002c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000340), &(0x7f0000000380)=0x4) r7 = fsmount(r2, 0x1, 0x6) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r8, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000500)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000580)={r9, 0x5, 0xb2}) r10 = fcntl$dupfd(r0, 0x0, r2) ioctl$AUTOFS_IOC_CATATONIC(r10, 0x9362, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) lseek(r6, 0x378ec00000, 0x0) r11 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2a) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f00000005c0)={0x101f8, 0x0, 0x4, 0x1000, &(0x7f0000ffb000/0x1000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r12, 0x4008af03, &(0x7f0000001b40)={0x9, 0x0, [{0x80a0000, 0xe5, &(0x7f0000000640)=""/229}, {0x8080000, 0x1000, &(0x7f0000000740)=""/4096}, {0x9000, 0x42, &(0x7f0000001740)=""/66}, {0x2000, 0xa, &(0x7f00000017c0)=""/10}, {0x8119000, 0xc7, &(0x7f0000001800)=""/199}, {0x2, 0xf4, &(0x7f0000001900)=""/244}, {0x1, 0x3, &(0x7f0000001a00)=""/3}, {0xdddd0000, 0x20, &(0x7f0000001a40)=""/32}, {0x2, 0x98, &(0x7f0000001a80)=""/152}]}) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000001cc0)={'filter\x00', 0x7, 0x4, 0x438, 0x130, 0x240, 0x350, 0x350, 0x350, 0x350, 0x4, &(0x7f0000001c80), {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x23f7, 0x7, 0x1, 0x0, "b31a39ef2b6317aad96173dd5b82173d7f7ca133e8052f889b96c1618bc4709f32a5723ade8e11ce3356141041f78e751b84cba9fb2087a00965b0da5b12fd99"}}}, {{@arp={@private=0xa010101, @empty, 0xff, 0xffffffff, 0x4, 0x2, {@mac=@local, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@random="a1e15a727e52", {[0xff, 0xff, 0xff, 0xff]}}, 0x11, 0xff, 0x1, 0x4, 0x0, 0x7ff, 'syz_tun\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x9d}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="07e77d937b18", @empty, @empty, @local, 0x4, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000002180)={0x1}) executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x32, 0xe4, 0x5, 0x8000}, {0xc7b, 0x22, 0x8, 0x4}, {0x2, 0xff, 0xc, 0x3c5}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x20}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x141942, 0x0) r2 = syz_clone(0x82000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330, r2}, 0x0) r3 = getpgid(r2) ioprio_set$pid(0x1, r3, 0x4004) pipe2(&(0x7f0000000040), 0x800) (async) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x32, 0xe4, 0x5, 0x8000}, {0xc7b, 0x22, 0x8, 0x4}, {0x2, 0xff, 0xc, 0x3c5}]}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x20}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x141942, 0x0) (async) syz_clone(0x82000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) capset(&(0x7f0000000080)={0x19980330, r2}, 0x0) (async) getpgid(r2) (async) ioprio_set$pid(0x1, r3, 0x4004) (async) executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x440280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount(&(0x7f0000001400)=@md0, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) executing program 0: creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bind$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x81, @mcast2, 0xffffffff}, 0x1c) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) r2 = fanotify_init(0x0, 0x0) timerfd_create(0x0, 0x80000) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r2, 0x1, 0x2a, r3, 0x0) fanotify_mark(r2, 0x2, 0x40001018, r3, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001b80), 0x109080, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000d00)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="202348000000364f918e088b2c6f40f1dfd3aa4f606d5ec1e537b71795e43d29ab818f83736a8e8fdd71ad8b2bc90f66ea79eae7413a1eb24f9bead708d3f853fd1f2f602377bb9c6185eedb71135a495c9fe1"], 0x0, 0x0, 0x0, 0x0}, 0x0) close(0x3) r2 = socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req={0xd26a, 0xffff0001, 0x101, 0x3}, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000240)=0x4) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x4a) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000200)={'amplc_pc236\x00', [0x1000, 0x9, 0xff, 0x10, 0xf90, 0x3, 0x3, 0xd7c0, 0x2, 0x10000, 0x0, 0x516a, 0x4, 0x3, 0x9, 0x2, 0x6b3, 0xa00, 0x8, 0x5, 0xe3bf, 0xda3, 0x1ff, 0x6, 0x0, 0xffffffff, 0x9, 0x4, 0x4, 0x5, 0x3, 0x5]}) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r4, @ANYRES64=r2], 0x0) executing program 8: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000640)={0x8, 0x1, &(0x7f0000000580)=[0x3737], &(0x7f00000005c0), &(0x7f0000000600), 0xffffffffffffffff}) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='v7\x00', 0x288002, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{0x0}, {&(0x7f0000002100)=""/4105, 0x1009}], 0x2, 0xfffffffc, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x2001}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) recvfrom(r2, &(0x7f0000000100)=""/108, 0x6c, 0x10000, 0x0, 0x0) executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f00000003c0)={0x28, 0x0, 0x1ffffcb66, @host}, 0x10) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r2, 0xf648b000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x8010) syz_clone(0x8008000, &(0x7f00000000c0)="1a17f7bc026af99a37ffc7d6d0a977db77e893f7d46769be3646a66f98cf3297f42e488ac1fc6993252e3d322f3ed2e385d5b48fa39bab82434b1a0871478a33ec95a8df11176ff0799eb6ec0d83cbe81ff45392258457f809e07231431e95bfadd29df22ad7383a959e96c7bf5909de300e7f8f47a5bd9b13499a47f71bba740de9ef13e0", 0x85, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000001180)="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") mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x1, 0x2) executing program 7: r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000240)={0x0, 0x4d20, 0x0, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000640)={0x8, 0x1, {0x8000000000000000, @struct={0x1, 0x3138724f}, r1, 0x4, 0x200, 0x4, 0x2, 0x8, 0x10, @struct={0x4358, 0x8}, 0x4, 0x9, [0x7, 0x0, 0x7, 0x894a000000000, 0x8d27, 0x8]}, {0x8, @struct={0x3, 0x7fff}, 0x0, 0x2, 0x8, 0x1, 0x1, 0x1, 0x90, @usage=0xf, 0x4, 0x8, [0x7fff, 0x7, 0x7f, 0x800, 0x6, 0x3]}, {0xe, @usage=0x7, 0x0, 0xb, 0x5, 0xe, 0x3, 0x3, 0x44, @struct={0x2, 0xfff}, 0x7ff, 0x1, [0x9, 0x17, 0x5, 0x4, 0x8000000000000001, 0x3]}, {0x4, 0x2, 0x4}}) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000180)=""/151, 0x97}, {&(0x7f0000000a40)=""/184, 0xb8}, {&(0x7f0000000b00)=""/146, 0x92}, {&(0x7f0000000bc0)=""/143, 0x8f}, {&(0x7f0000000c80)=""/224, 0xe0}], 0x5, 0x8, 0x9) symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r3, 0x80044944, 0x0) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) executing program 8: socket$rds(0x15, 0x5, 0x0) (async) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x0) (async) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000380)={0x8, 0x0, @broadcast}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000003c0)="08003b117c124057", 0x8}], 0x1}, 0x2004c880) (async) socket$netlink(0x10, 0x3, 0x8) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async, rerun: 64) ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000180)={0x0, 0xfffffffffffffe98}) (async, rerun: 64) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140), 0x101, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f00000000c0)={0xfffffffe}) creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000180)=0x1, 0x4) mount(&(0x7f0000000000)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='xfs\x00', 0x2308c8b, 0x0) syz_open_dev$video(&(0x7f0000000140), 0x101, 0x0) (async) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f00000000c0)={0xfffffffe}) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) socket$inet6(0xa, 0x800000000000002, 0x0) (async) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000180)=0x1, 0x4) (async) mount(&(0x7f0000000000)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='xfs\x00', 0x2308c8b, 0x0) (async) executing program 8: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x50) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) recvfrom$inet6(r1, &(0x7f0000000300)=""/218, 0xda, 0x120, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x93771000) executing program 0: ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_SET_DEVICE_ATTR_vm(r0, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x80000000, 0x1, &(0x7f0000000000)=0x7}) fsync(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8b000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xaab61f4d80e63913}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0x1a, 0x34, @random="ad5f6769463c7395b9f062f9dca68e8e1cf496221777"}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="28cc2ea2f29592012ad0f8a1ead50fd26ac4029e1d67dfbf949548"}]}, 0x68}}, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xe8) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, r6, &(0x7f00000004c0)='./file0\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x121002, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2c) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000540), 0xc52080, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0], 0x1}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r9 = syz_open_dev$audion(&(0x7f0000000600), 0x1, 0x0) r10 = accept4$tipc(r9, &(0x7f0000000640), &(0x7f0000000680)=0x10, 0x80000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r9, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x108, r11, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x40}, {0x6, 0x16, 0xfff}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xf98}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x563}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10}, {0x6}, {0x5}}]}, 0x108}, 0x1, 0x0, 0x0, 0x4008051}, 0x80) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24040000) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000a00)={'pim6reg0\x00', 0x200}) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000c80)={&(0x7f0000000a40), 0xc, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x180, r12, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "070fd46880ac05f909b18217f4142018943e5d181a61"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "2b5e3f6550702830bb5ea1a92e345426780dc18803b9768ed84ccd9cf653bfc9a1"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "260a8f2e51483eda0e13f17d6e68251ba1c7c8d5a25a19f3614ed801e1a83aa0d2"}}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "25e4146126d55bde4d8803eb97db8f6b80b6bf378be8f21664ef04b3"}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x40000}, 0x11) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xd4, r3, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8e, 0x37}}}}, [@NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{}, {0x7}, {0x4d, 0x1}, {0x0, 0x3}, {0x7f, 0x3}, {0x9, 0x2}, {0x54, 0x3}, {0xde, 0x5}, {0x5, 0x5}, {0x2, 0x4}, {0x7, 0x6}, {0xb}, {0x80}, {0x3, 0x5}, {0x5}, {0x2, 0x1}, {0xc2, 0x5}, {0x4, 0x1}, {0x5, 0x1}, {0xf9, 0x7}], "a2ac0e2733954206"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x4, 0x4}, {0x1, 0x7}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x5}], "ce3a2c5d7f23cffb"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x1, 0x2}, {0x5d, 0x6}, {0x8, 0x6}, {0x5a, 0x4}, {0x1f, 0x4}, {0x7, 0x7}], "4dd5edd8a3e114da"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x1, 0x5}, {0x8, 0x2}, {0x0, 0x1}, {0x0, 0x5}, {0x3, 0x7}, {0x0, 0x6}, {0x3b, 0x2}, {0xfb, 0x1}, {0xa, 0x7}, {0xa, 0x3}], "509cd36742d5426d"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0xd, 0x1}, {0x68, 0x3}, {0x5, 0x5}, {0xb5, 0x4}, {0xa, 0x4}, {0x3, 0x6}, {0x7, 0x2}, {0x1, 0x5}, {0x8, 0x5}, {0x40, 0x4}, {0x9, 0x7}, {0x18}, {0x3, 0x5}, {0x2, 0x5}], "00fb0318e60fb7a3"}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10000090}, 0x8000) getsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f00000010c0)={@empty, 0x0}, &(0x7f0000001100)=0x14) sendmsg$inet(r10, &(0x7f00000012c0)={&(0x7f0000000e80)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000ec0)="f793be03122209bda752fcc4cbd181c76b17cb6123b5b95e315dd789a0486be55974f84258f30cb53a7bba10c1921214fa8a7e681254d2ec337c55d3296a3e2bc0a6b73634b599384ae6718795dc882c0e09f7e9e824ea4ae791500d8ad4b386b632d22c84a5449ea69003222214efa4478f3e98048f57d02a6058e10f5f899bae300d7bd68b599ddb817f3f4844696fdf3ce12b70012afc59c114bbf0b5b560bf42c214e1ced353fe1fe940c6cb03d42394519fe11992ee5943f871038065a400fd99f12b7b07a2669cc29a9836e93078", 0xd1}, {&(0x7f0000000fc0)="f4406ac907fd5210e35bb0991246455111be12c9b6110e0671079adbb0c05ffade2019ca18cf5985c4616808fd497c0e31c33efb16c4c8d658bb8d914f2eeeb37c", 0x41}, {&(0x7f0000001040)="7dbfff9cb52c0488d7f65d5ea659772d55e5fb47fc6a187d8d3d26c685f81d3d7b955125587bc1ba0f3307c0847c01d04de93d8bf7447b50", 0x38}], 0x3, &(0x7f0000001140)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @local, @broadcast}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x14, 0x0, 0x5, [0x5, 0x6, 0x3, 0x1ff, 0x0]}, @generic={0x88, 0x2}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8934}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @private=0xa010102}}}, @ip_retopts={{0x80, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xba, [@rand_addr=0x64010101]}, @ra={0x94, 0x4}, @noop, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0x5a, [@broadcast, @remote]}, @cipso={0x86, 0x38, 0x1, [{0x0, 0x11, "cb03e1f56d26038b414c16bfcbef3e"}, {0x0, 0x5, "31931d"}, {0x4, 0x7, "d370dcdd41"}, {0x2, 0xd, "375a8dc3c1e8d34de1490d"}, {0x5, 0x8, "252737054b27"}]}, @ssrr={0x89, 0xf, 0x3f, [@dev={0xac, 0x14, 0x14, 0x30}, @multicast2, @multicast1]}, @rr={0x7, 0xb, 0x56, [@local, @multicast1]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x150}, 0x4000000) syz_open_dev$dri(&(0x7f0000001300), 0x850, 0x400000) executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x20000, 0x40) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'batadv_slave_1\x00', &(0x7f0000000040)=@ethtool_rxfh={0x47, 0x400, 0x2, 0x8, 0x6, 'q-v', 0x3, [0x2, 0x7, 0xa9, 0x4, 0x3, 0x728, 0x0, 0x20]}}) getdents(r0, &(0x7f00000000c0)=""/235, 0xeb) cachestat(r0, &(0x7f00000001c0)={0x7fff, 0x1}, &(0x7f0000000200), 0x0) mknodat$null(r0, &(0x7f0000000240)='./file0\x00', 0x2, 0x103) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x240, 0x102) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000002c0)=0x1, 0x4) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) r1 = msgget$private(0x0, 0x23) msgrcv(r1, &(0x7f0000000380)={0x0, ""/185}, 0xc1, 0x3, 0x1000) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$sock(r2, &(0x7f00000011c0)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x5e4, @local, 0x24}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)="7b197d6f7853092dcc0a42d1f40865e4a3c0aaeb1e545c417cad65e2537a14d8f50083e1b91ff2de48903f0c9e82a2f737006d47a2667fd12a6dbe702d32cdc1aa942c27316dfcbb0a649989310a10caf404532327e8db4b36591b86d9031bc4c14a6848c13bc3edb05ce3ffcde260a5e88a065c1948a2a2b21ff9d4cf3e5e088439513cb04feed81562ecb677f60b3f9be5af55a3101b0406a634c8e38549cf84d033b8013edbb23d1f8d1dfc7f2bf6131251fd07ce1ab5f3c834a4c3694b28969073f2f79b1c35f12090f9e68a3ca3fbeade789bac45172ad0344d56c4", 0xde}], 0x1, &(0x7f0000000640)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xfe6}}], 0x48}}, {{&(0x7f00000006c0)=@phonet={0x23, 0x7, 0x9, 0x3}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000740)="42c7c73aff7bb1fb972d04ebfdb4949911e2d4e2a7e0e324f797ab024641ee109f51e052409c65fd58b1dbce447331099b4dc9", 0x33}], 0x1, &(0x7f00000007c0)=[@timestamping={{0x14, 0x1, 0x25, 0x400}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000001}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x90}}, {{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x4, 0x2, 0x1, {0xa, 0x4e22, 0x9, @private2, 0x6}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000900)}, {&(0x7f0000000940)="0d47ef03ec7c7536ee", 0x9}, {&(0x7f0000000980)="96678fab33ca2bb9b425ceec3da5ace35e937601429867d6f01cce069b4c34553d7feb7588a458fdc8145e36520ce4f812fec44bf3312ce9fe846a8e6a166c5759a4ac7967683a01518ebbc429177abc8c60f9b231022019987dd6c7902c70256e06acc77556a23ca496cd85a2946b51aa", 0x71}, {&(0x7f0000000a00)="b6b3dd76a0b7241a6db5179678b73b2a672ff5128ee74ba197f785a38979f5dc7120b4beb29a88178b128474e4a4e42fff7584fdce62583d935a06ea41d1e17cce67ea16bd1c76ad8b5df1bdba139ddc7e57942138b9cf79c8", 0x59}], 0x4, &(0x7f0000000ac0)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x58b}}, @mark={{0x14, 0x1, 0x24, 0xc}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}], 0xf0}}, {{&(0x7f0000000bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x4, 0x1, {0xa, 0x4e20, 0x8, @local, 0x8}}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000c40)="3d01b1b9313c6ccc46c8aa76e6c1a9f8935f4e14a38cc39344cc6d85c004bd1b7d2bb6aa0b70cd62ac626246ffff9352b1f99e26820f6931e7ab9522df0cb61ea71da3a0d0302f5e0bf196e85247adb5ba8a68b6a7bdafd3d797e398970d997b00ffd95358288d551b45c73cacdee3aab0711c2bd34d56f128f418cd16b3895cb18be1ad691ebcee7a6d910f9b65dd79e454edd3138813edfa6cc491e4a8eab16e5c10a76785735195308b97b4e0cfa7df26b8b0a9771542b67427bcc2a062e50a33980fda7839ccc8447bed5d73a84f39", 0xd1}, {&(0x7f0000000d40)="0efe35806c3cfbeb133a85c09d205d70fb9c47f4acab7883d7810a575cf1ab87476b9a5bf860652265b65bbefcdad209d717c58343e964c95a50d4efc140ee2d2f672a4253b75f110591f574244d1374e28fc9683f282b00fcc2475582531cd378120b199702a0e131758737aaafc2b384b8627515dfbe93e62a00e74a911b270b5e9a45cb624a3b95cbaf15f0bcdcf7726be7c64d942343924a3f9b9b1a98", 0x9f}, {&(0x7f0000000e00)="b9bac540b4cde97354394ded15b2f958f0ea5d799ed72d6f6a3c39272b98d283", 0x20}, {&(0x7f0000000e40)="10e6494ac5cc", 0x6}, {&(0x7f0000000e80)="e2d41eb51f0b729df53d86c01a0b662d0fab307e1185d50915307ce3e0452cdcf41a08e60a6f49a1b6f99e3f6fcacf20f0b486880397bd85ff8e8b3af2ffe45b99fb6e88c797a9af5772aaf77e4619e3acb71455e48ad44fe66618d9dd7b2b24d5e24bb003d8f4a59b4082454d91e580251342f39ffd5075bed42fed5efdfb728e43f266d9dc068b85d978631f89e43791cef6cac4a8b19e2b82684202e8f66e635e2bf769953ee2baca1894e11c1b9d923a1d86ffd086007e055a8efc3de8fc4b4d64772be00e75d931fc3ec442743ed17f8335ff2b93bb19e4484f65bcc752c5a4c6f883661d2786b4cd7cc50633ec1398c2628ad796", 0xf7}, {&(0x7f0000000f80)="e4e38d125addc8fbc801e297639cf93990f87b8797d6ad8991cd88f7a256368d4b203b1a0b3f8167d3bdd42cca9d46c10f5f8e91b64807c7685ed83263616eccad279b2055b0ce5ad343777d054f949bf469b3d753d12eac838275c1046d403b1b95a9eca32a8a133c87a679bb5fe79a47e781bca1e3d57e5961f2b94d", 0x7d}, {&(0x7f0000001000)="e0e52a57c57e90008b7cc06742cc621c47d73d975e3d119c4228e6451802769814fd23bca941a88d6a3dbf715429220303739a5fd9a2f6aacac55362f5a30420817352ddf6eda66a52e20942baebcad8552f7ebe7ed7297ab48eba7e986d", 0x5e}], 0x7, &(0x7f0000001100)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x8001}}, @mark={{0x14, 0x1, 0x24, 0xc}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x6a}}], 0xc0}}], 0x4, 0x4008800) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x3c, 0x5, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}}, 0x4) r5 = fspick(r0, &(0x7f0000001400)='./file0\x00', 0x0) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000001440)) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000001480)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) r7 = semget$private(0x0, 0x2, 0x601) semctl$IPC_INFO(r7, 0x4, 0x3, &(0x7f00000014c0)=""/205) socket$inet6(0xa, 0xa, 0xffff) connect$rose(r2, &(0x7f00000015c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @bcast}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), r0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000001680)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001640)={0xffffffffffffffff}, 0x106, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f00000016c0)={0x4, 0x8, 0xfa00, {r8, 0xcc06}}, 0x10) r9 = syz_open_dev$evdev(&(0x7f0000001700), 0x3, 0x725081) ioctl$EVIOCGBITSW(r9, 0x80404525, &(0x7f0000001740)=""/55) writev(r5, &(0x7f0000001840)=[{&(0x7f0000001780)="1aa978667ad71ac9929fc20cb9e3f5a15d653c3d96349dc9d0c128387005aa4610065a010c19cc81dd4f57091129f321a4bc0399cbc4fd36aa90b73a7ee7672a69364489c884f3a7d5d7215e9e8fa8582ddda34d86ea626aefc46d8f25cab6ee1d8d641e5923261b9507d0044b8bb742a85d45c7d383c380b65cfd659f24d8c9afc1e73e454a7800824597f207523e4e1e0b1688825df402430a96", 0x9b}], 0x1) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000001c00)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001900)={0x2a8, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa6bb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe2}]}, @TIPC_NLA_SOCK={0xa4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x972a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd5, 0x3, "88f0f9c2c1c1469fe6dc15059834b5e65d62ff292015e822cd60b93202da830b73d0d8a926aabe3994c5852233e391ef60a9299268c842d160f553d1196028acc56732ca54fe9ec759816d2a096ae408cb1cd934c4ad5ae05bbec5165fe42f9f35c75f9e32f5de9df638fd668e36a24c012fcda3a968bf0f36daafc8bfd656036010d8e68a8fb066a95a2567f09ce523ef861bddbc11fb6d0803013d97cdeab4b5f6a3f2fb26c2e683965166ef2c1b74c4739d87e1572c3e9f6830c58974256e18396094013e784b8e64a6ff73506c78b5"}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x25}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x40088d5) executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) mount$nfs(&(0x7f00000000c0)='-&[(\x00', &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{'--.'}, {'nilfs2\x00'}, {'nilfs2\x00'}, {'nilfs2\x00'}, {}, {'('}, {'nilfs2\x00'}, {'.'}, {'/dev/rnullb0\x00'}, {'nilfs2\x00'}], [{@appraise_type}, {@obj_role={'obj_role', 0x3d, '/dev/rnullb0\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@dont_hash}, {@appraise_type}, {@flag='nomand'}, {@subj_type={'subj_type', 0x3d, '/dev/rnullb0\x00'}}]}) executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}]}]}, 0x30}}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x2, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) setresuid(0xee01, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x3) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x10) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40046302, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) write$uinput_user_dev(r3, &(0x7f00000004c0)={'syz0\x00', {0x9, 0x2, 0x9, 0x3ff}, 0x4a, [0x0, 0x81, 0x7, 0x200, 0x58a, 0x5, 0x91, 0x9, 0x5, 0x2, 0xf2e7, 0x1, 0x3, 0x0, 0x4, 0xfff, 0xf4, 0xffffffff, 0x2, 0x3ff, 0x3, 0x101, 0x6, 0x80, 0x9, 0x3, 0x8, 0x8, 0xffff, 0x5, 0x6, 0x560, 0x1, 0x5, 0xc00, 0x7, 0x8, 0x10000, 0x6, 0x7, 0x2c7b, 0x0, 0x7, 0x3, 0x4, 0x8000, 0x0, 0xff, 0x100, 0x6, 0xfffffff9, 0x4, 0x1, 0x6, 0x4, 0x6, 0x80, 0xb64, 0x2, 0x91c8, 0x9, 0x6, 0x6, 0x1], [0xffffff80, 0x6, 0x2, 0x80000000, 0x3, 0x7ff, 0x8, 0x101, 0x0, 0x8, 0x4, 0x5, 0x40, 0xb, 0x9, 0x1, 0x4, 0x3, 0x6, 0x0, 0x63, 0x1, 0x800, 0x12, 0x8c5, 0xf, 0x6, 0x8, 0x2, 0x10, 0x5, 0x6, 0x4, 0x6, 0x2, 0x3, 0x8, 0x1, 0x4, 0x3, 0x2d2, 0x40, 0x4, 0x100, 0xde, 0x9, 0x6, 0x4e9, 0x0, 0xfffffffc, 0x80, 0x7f20dd96, 0x4, 0x63b9, 0x100, 0x6, 0x6, 0x7f, 0x0, 0x68, 0xffff72aa, 0x5, 0xffffffff, 0x8001], [0x8, 0x6, 0xe, 0xffffffb6, 0x7, 0x879, 0xc, 0x0, 0xa, 0x3ff, 0xfffffff7, 0x9, 0x1ff, 0x6, 0x1, 0x8, 0xaf5c, 0x6, 0x8, 0xfffffff6, 0x7a, 0x6, 0x7000000, 0x9, 0x3bf99e39, 0x8, 0x10, 0x2, 0x7f, 0x2, 0x1, 0x6, 0xfffffffa, 0x6, 0x3cee, 0x5, 0x2, 0x8a9, 0x8, 0x3, 0x2, 0x1, 0x24d, 0x80000000, 0x40, 0x3, 0x200, 0x10001, 0xe, 0x3, 0x5, 0xffffff7e, 0x5, 0x6, 0x2b7, 0xeaf, 0x4c, 0x2, 0x5, 0x800, 0x0, 0x1, 0x5, 0x7], [0xffff, 0x3, 0x10000, 0x3f9e, 0xe, 0x19, 0x5, 0xe, 0x8, 0x1, 0x8000, 0xba, 0xbba, 0x4, 0x4, 0xd, 0xff, 0x8, 0x303b, 0x7, 0x7, 0x8, 0x6, 0x8, 0x7, 0x3, 0x0, 0xcb, 0xb6, 0x8, 0x60, 0xffff7fff, 0x0, 0xc, 0x401, 0x4, 0x102, 0x1, 0x80000000, 0x4, 0x12c6, 0xd, 0x80000, 0x2, 0x1, 0x8001, 0x3, 0x3, 0x0, 0x7, 0x7fffffff, 0x4, 0x4, 0xf, 0x8, 0x4, 0x101, 0x2, 0xffffffff, 0x4, 0x9, 0x2, 0x61f09ecc, 0xdea9]}, 0x45c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fstat(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) executing program 8: r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x179}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r1, 0xaea2, 0x0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f00000000c0)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x7) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xac) ioctl$KVM_CAP_SYNC_REGS(r0, 0x4068aea3, &(0x7f0000000340)) readv(r3, &(0x7f0000001800)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/207, 0xcf}, {&(0x7f00000014c0)=""/220, 0xdc}, {&(0x7f00000015c0)=""/15, 0xf}, {&(0x7f0000001600)=""/62, 0x3e}, {&(0x7f0000001640)=""/223, 0xdf}, {&(0x7f0000001740)=""/88, 0x58}, {&(0x7f00000017c0)=""/62, 0x3e}], 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000080)=0x8, 0x4) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0xf1cd3e1dfaaaa71a, 0x0) executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xd, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) sendmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)="5ff4c2328c1dffea2fe1c181bb2b", 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="59bb7c436077bcd8099c6e2d10b8c6f1d2fbd238491903133c42d47d52", 0x1d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)="83", 0x1}], 0x1}}], 0x3, 0x10048885) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) sync() mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x1000400, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000004503"]) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2) program did not crash replaying the whole log did not cause a kernel crash single: executing 14 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-bind$inet6-connect$inet6-setsockopt$SO_BINDTODEVICE-sendmmsg-mkdir-sync-mount$overlay-openat$kvm-dup-ioctl$KVM_SET_MSRS-mount-syz_genetlink_get_family_id$mptcp detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xd, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) sendmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)="5ff4c2328c1dffea2fe1c181bb2b", 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="59bb7c436077bcd8099c6e2d10b8c6f1d2fbd238491903133c42d47d52", 0x1d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)="83", 0x1}], 0x1}}], 0x3, 0x10048885) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) sync() mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x1000400, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000004503"]) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_kvm_add_vcpu$x86-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_TSC_KHZ_cpu-ioctl$KVM_GET_DEBUGREGS-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCVHANGUP-openat$ttyS3-creat-ioctl$KVM_CAP_SYNC_REGS-readv-openat$cgroup_ro-write$cgroup_subtree-mmap-socket$kcm-setsockopt$kcm_KCM_RECV_DISABLE-mount detailed listing: executing program 0: r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x179}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r1, 0xaea2, 0x0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f00000000c0)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x7) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xac) ioctl$KVM_CAP_SYNC_REGS(r0, 0x4068aea3, &(0x7f0000000340)) readv(r3, &(0x7f0000001800)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/207, 0xcf}, {&(0x7f00000014c0)=""/220, 0xdc}, {&(0x7f00000015c0)=""/15, 0xf}, {&(0x7f0000001600)=""/62, 0x3e}, {&(0x7f0000001640)=""/223, 0xdf}, {&(0x7f0000001740)=""/88, 0x58}, {&(0x7f00000017c0)=""/62, 0x3e}], 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000080)=0x8, 0x4) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0xf1cd3e1dfaaaa71a, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$vsock_stream-getsockopt-landlock_create_ruleset-landlock_restrict_self-setresuid-faccessat-madvise-openat$rnullb-openat$uinput-openat$binderfs-ioctl$BINDER_WRITE_READ-write$uinput_user_dev-socketpair$unix-openat$tcp_congestion-fstat-setreuid-mmap detailed listing: executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x2, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) setresuid(0xee01, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x3) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x10) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40046302, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) write$uinput_user_dev(r3, &(0x7f00000004c0)={'syz0\x00', {0x9, 0x2, 0x9, 0x3ff}, 0x4a, [0x0, 0x81, 0x7, 0x200, 0x58a, 0x5, 0x91, 0x9, 0x5, 0x2, 0xf2e7, 0x1, 0x3, 0x0, 0x4, 0xfff, 0xf4, 0xffffffff, 0x2, 0x3ff, 0x3, 0x101, 0x6, 0x80, 0x9, 0x3, 0x8, 0x8, 0xffff, 0x5, 0x6, 0x560, 0x1, 0x5, 0xc00, 0x7, 0x8, 0x10000, 0x6, 0x7, 0x2c7b, 0x0, 0x7, 0x3, 0x4, 0x8000, 0x0, 0xff, 0x100, 0x6, 0xfffffff9, 0x4, 0x1, 0x6, 0x4, 0x6, 0x80, 0xb64, 0x2, 0x91c8, 0x9, 0x6, 0x6, 0x1], [0xffffff80, 0x6, 0x2, 0x80000000, 0x3, 0x7ff, 0x8, 0x101, 0x0, 0x8, 0x4, 0x5, 0x40, 0xb, 0x9, 0x1, 0x4, 0x3, 0x6, 0x0, 0x63, 0x1, 0x800, 0x12, 0x8c5, 0xf, 0x6, 0x8, 0x2, 0x10, 0x5, 0x6, 0x4, 0x6, 0x2, 0x3, 0x8, 0x1, 0x4, 0x3, 0x2d2, 0x40, 0x4, 0x100, 0xde, 0x9, 0x6, 0x4e9, 0x0, 0xfffffffc, 0x80, 0x7f20dd96, 0x4, 0x63b9, 0x100, 0x6, 0x6, 0x7f, 0x0, 0x68, 0xffff72aa, 0x5, 0xffffffff, 0x8001], [0x8, 0x6, 0xe, 0xffffffb6, 0x7, 0x879, 0xc, 0x0, 0xa, 0x3ff, 0xfffffff7, 0x9, 0x1ff, 0x6, 0x1, 0x8, 0xaf5c, 0x6, 0x8, 0xfffffff6, 0x7a, 0x6, 0x7000000, 0x9, 0x3bf99e39, 0x8, 0x10, 0x2, 0x7f, 0x2, 0x1, 0x6, 0xfffffffa, 0x6, 0x3cee, 0x5, 0x2, 0x8a9, 0x8, 0x3, 0x2, 0x1, 0x24d, 0x80000000, 0x40, 0x3, 0x200, 0x10001, 0xe, 0x3, 0x5, 0xffffff7e, 0x5, 0x6, 0x2b7, 0xeaf, 0x4c, 0x2, 0x5, 0x800, 0x0, 0x1, 0x5, 0x7], [0xffff, 0x3, 0x10000, 0x3f9e, 0xe, 0x19, 0x5, 0xe, 0x8, 0x1, 0x8000, 0xba, 0xbba, 0x4, 0x4, 0xd, 0xff, 0x8, 0x303b, 0x7, 0x7, 0x8, 0x6, 0x8, 0x7, 0x3, 0x0, 0xcb, 0xb6, 0x8, 0x60, 0xffff7fff, 0x0, 0xc, 0x401, 0x4, 0x102, 0x1, 0x80000000, 0x4, 0x12c6, 0xd, 0x80000, 0x2, 0x1, 0x8001, 0x3, 0x3, 0x0, 0x7, 0x7fffffff, 0x4, 0x4, 0xf, 0x8, 0x4, 0x101, 0x2, 0xffffffff, 0x4, 0x9, 0x2, 0x61f09ecc, 0xdea9]}, 0x45c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fstat(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$incfs-ioctl$sock_SIOCETHTOOL-getdents-cachestat-mknodat$null-openat$dir-setsockopt$CAN_RAW_JOIN_FILTERS-getsockopt$CAN_RAW_LOOPBACK-msgget$private-msgrcv-syz_init_net_socket$rose-socket$nl_netfilter-sendmmsg$sock-ioctl$AUTOFS_DEV_IOCTL_EXPIRE-sendmsg$IPSET_CMD_RENAME-fspick-ioctl$TIOCGSOFTCAR-socket$pptp-bind$pptp-semget$private-semctl$IPC_INFO-socket$inet6-connect$rose-syz_genetlink_get_family_id$nl80211-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_RESOLVE_ROUTE-syz_open_dev$evdev-ioctl$EVIOCGBITSW-writev-sendmsg$TIPC_NL_BEARER_GET detailed listing: executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x20000, 0x40) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'batadv_slave_1\x00', &(0x7f0000000040)=@ethtool_rxfh={0x47, 0x400, 0x2, 0x8, 0x6, 'q-v', 0x3, [0x2, 0x7, 0xa9, 0x4, 0x3, 0x728, 0x0, 0x20]}}) getdents(r0, &(0x7f00000000c0)=""/235, 0xeb) cachestat(r0, &(0x7f00000001c0)={0x7fff, 0x1}, &(0x7f0000000200), 0x0) mknodat$null(r0, &(0x7f0000000240)='./file0\x00', 0x2, 0x103) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x240, 0x102) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000002c0)=0x1, 0x4) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) r1 = msgget$private(0x0, 0x23) msgrcv(r1, &(0x7f0000000380)={0x0, ""/185}, 0xc1, 0x3, 0x1000) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$sock(r2, &(0x7f00000011c0)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x5e4, @local, 0x24}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)="7b197d6f7853092dcc0a42d1f40865e4a3c0aaeb1e545c417cad65e2537a14d8f50083e1b91ff2de48903f0c9e82a2f737006d47a2667fd12a6dbe702d32cdc1aa942c27316dfcbb0a649989310a10caf404532327e8db4b36591b86d9031bc4c14a6848c13bc3edb05ce3ffcde260a5e88a065c1948a2a2b21ff9d4cf3e5e088439513cb04feed81562ecb677f60b3f9be5af55a3101b0406a634c8e38549cf84d033b8013edbb23d1f8d1dfc7f2bf6131251fd07ce1ab5f3c834a4c3694b28969073f2f79b1c35f12090f9e68a3ca3fbeade789bac45172ad0344d56c4", 0xde}], 0x1, &(0x7f0000000640)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xfe6}}], 0x48}}, {{&(0x7f00000006c0)=@phonet={0x23, 0x7, 0x9, 0x3}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000740)="42c7c73aff7bb1fb972d04ebfdb4949911e2d4e2a7e0e324f797ab024641ee109f51e052409c65fd58b1dbce447331099b4dc9", 0x33}], 0x1, &(0x7f00000007c0)=[@timestamping={{0x14, 0x1, 0x25, 0x400}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000001}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x90}}, {{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x4, 0x2, 0x1, {0xa, 0x4e22, 0x9, @private2, 0x6}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000900)}, {&(0x7f0000000940)="0d47ef03ec7c7536ee", 0x9}, {&(0x7f0000000980)="96678fab33ca2bb9b425ceec3da5ace35e937601429867d6f01cce069b4c34553d7feb7588a458fdc8145e36520ce4f812fec44bf3312ce9fe846a8e6a166c5759a4ac7967683a01518ebbc429177abc8c60f9b231022019987dd6c7902c70256e06acc77556a23ca496cd85a2946b51aa", 0x71}, {&(0x7f0000000a00)="b6b3dd76a0b7241a6db5179678b73b2a672ff5128ee74ba197f785a38979f5dc7120b4beb29a88178b128474e4a4e42fff7584fdce62583d935a06ea41d1e17cce67ea16bd1c76ad8b5df1bdba139ddc7e57942138b9cf79c8", 0x59}], 0x4, &(0x7f0000000ac0)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x58b}}, @mark={{0x14, 0x1, 0x24, 0xc}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}], 0xf0}}, {{&(0x7f0000000bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x4, 0x1, {0xa, 0x4e20, 0x8, @local, 0x8}}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000c40)="3d01b1b9313c6ccc46c8aa76e6c1a9f8935f4e14a38cc39344cc6d85c004bd1b7d2bb6aa0b70cd62ac626246ffff9352b1f99e26820f6931e7ab9522df0cb61ea71da3a0d0302f5e0bf196e85247adb5ba8a68b6a7bdafd3d797e398970d997b00ffd95358288d551b45c73cacdee3aab0711c2bd34d56f128f418cd16b3895cb18be1ad691ebcee7a6d910f9b65dd79e454edd3138813edfa6cc491e4a8eab16e5c10a76785735195308b97b4e0cfa7df26b8b0a9771542b67427bcc2a062e50a33980fda7839ccc8447bed5d73a84f39", 0xd1}, {&(0x7f0000000d40)="0efe35806c3cfbeb133a85c09d205d70fb9c47f4acab7883d7810a575cf1ab87476b9a5bf860652265b65bbefcdad209d717c58343e964c95a50d4efc140ee2d2f672a4253b75f110591f574244d1374e28fc9683f282b00fcc2475582531cd378120b199702a0e131758737aaafc2b384b8627515dfbe93e62a00e74a911b270b5e9a45cb624a3b95cbaf15f0bcdcf7726be7c64d942343924a3f9b9b1a98", 0x9f}, {&(0x7f0000000e00)="b9bac540b4cde97354394ded15b2f958f0ea5d799ed72d6f6a3c39272b98d283", 0x20}, {&(0x7f0000000e40)="10e6494ac5cc", 0x6}, {&(0x7f0000000e80)="e2d41eb51f0b729df53d86c01a0b662d0fab307e1185d50915307ce3e0452cdcf41a08e60a6f49a1b6f99e3f6fcacf20f0b486880397bd85ff8e8b3af2ffe45b99fb6e88c797a9af5772aaf77e4619e3acb71455e48ad44fe66618d9dd7b2b24d5e24bb003d8f4a59b4082454d91e580251342f39ffd5075bed42fed5efdfb728e43f266d9dc068b85d978631f89e43791cef6cac4a8b19e2b82684202e8f66e635e2bf769953ee2baca1894e11c1b9d923a1d86ffd086007e055a8efc3de8fc4b4d64772be00e75d931fc3ec442743ed17f8335ff2b93bb19e4484f65bcc752c5a4c6f883661d2786b4cd7cc50633ec1398c2628ad796", 0xf7}, {&(0x7f0000000f80)="e4e38d125addc8fbc801e297639cf93990f87b8797d6ad8991cd88f7a256368d4b203b1a0b3f8167d3bdd42cca9d46c10f5f8e91b64807c7685ed83263616eccad279b2055b0ce5ad343777d054f949bf469b3d753d12eac838275c1046d403b1b95a9eca32a8a133c87a679bb5fe79a47e781bca1e3d57e5961f2b94d", 0x7d}, {&(0x7f0000001000)="e0e52a57c57e90008b7cc06742cc621c47d73d975e3d119c4228e6451802769814fd23bca941a88d6a3dbf715429220303739a5fd9a2f6aacac55362f5a30420817352ddf6eda66a52e20942baebcad8552f7ebe7ed7297ab48eba7e986d", 0x5e}], 0x7, &(0x7f0000001100)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x8001}}, @mark={{0x14, 0x1, 0x24, 0xc}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x6a}}], 0xc0}}], 0x4, 0x4008800) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x3c, 0x5, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}}, 0x4) r5 = fspick(r0, &(0x7f0000001400)='./file0\x00', 0x0) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000001440)) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000001480)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) r7 = semget$private(0x0, 0x2, 0x601) semctl$IPC_INFO(r7, 0x4, 0x3, &(0x7f00000014c0)=""/205) socket$inet6(0xa, 0xa, 0xffff) connect$rose(r2, &(0x7f00000015c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @bcast}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), r0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000001680)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001640)={0xffffffffffffffff}, 0x106, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f00000016c0)={0x4, 0x8, 0xfa00, {r8, 0xcc06}}, 0x10) r9 = syz_open_dev$evdev(&(0x7f0000001700), 0x3, 0x725081) ioctl$EVIOCGBITSW(r9, 0x80404525, &(0x7f0000001740)=""/55) writev(r5, &(0x7f0000001840)=[{&(0x7f0000001780)="1aa978667ad71ac9929fc20cb9e3f5a15d653c3d96349dc9d0c128387005aa4610065a010c19cc81dd4f57091129f321a4bc0399cbc4fd36aa90b73a7ee7672a69364489c884f3a7d5d7215e9e8fa8582ddda34d86ea626aefc46d8f25cab6ee1d8d641e5923261b9507d0044b8bb742a85d45c7d383c380b65cfd659f24d8c9afc1e73e454a7800824597f207523e4e1e0b1688825df402430a96", 0x9b}], 0x1) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000001c00)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001900)={0x2a8, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa6bb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe2}]}, @TIPC_NLA_SOCK={0xa4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x972a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd5, 0x3, "88f0f9c2c1c1469fe6dc15059834b5e65d62ff292015e822cd60b93202da830b73d0d8a926aabe3994c5852233e391ef60a9299268c842d160f553d1196028acc56732ca54fe9ec759816d2a096ae408cb1cd934c4ad5ae05bbec5165fe42f9f35c75f9e32f5de9df638fd668e36a24c012fcda3a968bf0f36daafc8bfd656036010d8e68a8fb066a95a2567f09ce523ef861bddbc11fb6d0803013d97cdeab4b5f6a3f2fb26c2e683965166ef2c1b74c4739d87e1572c3e9f6830c58974256e18396094013e784b8e64a6ff73506c78b5"}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x25}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x40088d5) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-socket$nl_generic-mmap-mremap-syz_clone-mmap-syz_open_dev$char_usb-openat$pfkey detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x10, r1, 0xfffff000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x200800, &(0x7f0000000080)="7f593f52f82c40cce97b14454d1bc7af21f23c71fa", 0x15, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8296632bbac009c8c0a82746562ae178b96c50f0433d33d0b55bf51010c8726a65a82e4bb6da4a5178287bcc62e876ddbd7ea68498e2eb795437dc8a5d122c0e7612f3d214b80b1580cf1ad96a5096a19da83bf85cdeeab2108966ef35d10cdd6bab8317e81a2486c6ca246a3d9bbeea3c1048bf578ecb92864257f8d2164154b6ffa5e6eeee8bb3884724b25688d9d9fa1e98cf6977e0af2ecb78df02df16eed2232867a8a28128ff5095e5bf01d1") mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) syz_open_dev$char_usb(0xc, 0xb4, 0x6) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) program crashed: INFO: task hung in exit_mm single: successfully extracted reproducer found reproducer with 8 syscalls minimizing guilty program testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-socket$nl_generic-mmap-mremap-syz_clone-mmap-syz_open_dev$char_usb detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x10, r1, 0xfffff000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x200800, &(0x7f0000000080)="7f593f52f82c40cce97b14454d1bc7af21f23c71fa", 0x15, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8296632bbac009c8c0a82746562ae178b96c50f0433d33d0b55bf51010c8726a65a82e4bb6da4a5178287bcc62e876ddbd7ea68498e2eb795437dc8a5d122c0e7612f3d214b80b1580cf1ad96a5096a19da83bf85cdeeab2108966ef35d10cdd6bab8317e81a2486c6ca246a3d9bbeea3c1048bf578ecb92864257f8d2164154b6ffa5e6eeee8bb3884724b25688d9d9fa1e98cf6977e0af2ecb78df02df16eed2232867a8a28128ff5095e5bf01d1") mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) syz_open_dev$char_usb(0xc, 0xb4, 0x6) program crashed: INFO: task hung in exit_mm testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-socket$nl_generic-mmap-mremap-syz_clone-mmap detailed listing: executing program 0: r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x10, r1, 0xfffff000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x200800, &(0x7f0000000080)="7f593f52f82c40cce97b14454d1bc7af21f23c71fa", 0x15, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8296632bbac009c8c0a82746562ae178b96c50f0433d33d0b55bf51010c8726a65a82e4bb6da4a5178287bcc62e876ddbd7ea68498e2eb795437dc8a5d122c0e7612f3d214b80b1580cf1ad96a5096a19da83bf85cdeeab2108966ef35d10cdd6bab8317e81a2486c6ca246a3d9bbeea3c1048bf578ecb92864257f8d2164154b6ffa5e6eeee8bb3884724b25688d9d9fa1e98cf6977e0af2ecb78df02df16eed2232867a8a28128ff5095e5bf01d1") mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) program crashed: INFO: task hung in exit_mm testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-socket$nl_generic-mmap-mremap-syz_clone detailed listing: executing program 0: openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x10, r0, 0xfffff000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x200800, &(0x7f0000000080)="7f593f52f82c40cce97b14454d1bc7af21f23c71fa", 0x15, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8296632bbac009c8c0a82746562ae178b96c50f0433d33d0b55bf51010c8726a65a82e4bb6da4a5178287bcc62e876ddbd7ea68498e2eb795437dc8a5d122c0e7612f3d214b80b1580cf1ad96a5096a19da83bf85cdeeab2108966ef35d10cdd6bab8317e81a2486c6ca246a3d9bbeea3c1048bf578ecb92864257f8d2164154b6ffa5e6eeee8bb3884724b25688d9d9fa1e98cf6977e0af2ecb78df02df16eed2232867a8a28128ff5095e5bf01d1") program crashed: INFO: task hung in exit_mm testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-socket$nl_generic-mmap-mremap detailed listing: executing program 0: openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x10, r0, 0xfffff000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) program crashed: INFO: task hung in exit_mm testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-socket$nl_generic-mmap detailed listing: executing program 0: openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x10, r0, 0xfffff000) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-socket$nl_generic-mremap detailed listing: executing program 0: openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) program crashed: INFO: task hung in exit_mm testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rnullb-mremap detailed listing: executing program 0: openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) program crashed: INFO: task hung in exit_mm testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap detailed listing: executing program 0: mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) program crashed: INFO: task hung in exit_mm extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap program crashed: INFO: task hung in exit_mm simplifying C reproducer testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap program crashed: INFO: task hung in exit_mm testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap program crashed: INFO: task hung in exit_mm testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap program crashed: INFO: task hung in exit_mm testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap program crashed: INFO: task hung in exit_mm testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap program did not crash testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap program crashed: INFO: task hung in exit_mm testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap detailed listing: executing program 0: mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) program crashed: INFO: task hung in exit_mm validation run: crashed=true testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap detailed listing: executing program 0: mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) program crashed: INFO: task hung in exit_mm validation run: crashed=true testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mremap detailed listing: executing program 0: mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) program crashed: INFO: task hung in exit_mm validation run: crashed=true reproducing took 2h40m13.198231501s repro crashed as (corrupted=false): INFO: task syz.0.16:6047 blocked for more than 143 seconds. Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 Blocked by coredump. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.16 state:D stack:25672 pid:6047 tgid:6047 ppid:5972 task_flags:0x40004c flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5351 [inline] __schedule+0x1737/0x4d30 kernel/sched/core.c:6954 __schedule_loop kernel/sched/core.c:7036 [inline] schedule+0x165/0x360 kernel/sched/core.c:7051 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7108 rwsem_down_read_slowpath+0x5fd/0x8f0 kernel/locking/rwsem.c:1088 __down_read_common kernel/locking/rwsem.c:1263 [inline] __down_read kernel/locking/rwsem.c:1276 [inline] down_read+0x98/0x2e0 kernel/locking/rwsem.c:1541 mmap_read_lock include/linux/mmap_lock.h:412 [inline] exit_mm+0xcc/0x2c0 kernel/exit.c:557 do_exit+0x648/0x2300 kernel/exit.c:947 do_group_exit+0x21c/0x2d0 kernel/exit.c:1100 __do_sys_exit_group kernel/exit.c:1111 [inline] __se_sys_exit_group kernel/exit.c:1109 [inline] __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1109 x64_sys_call+0x21f7/0x2200 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7ff30ff8e9a9 RSP: 002b:00007ffe30114228 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff30ff8e9a9 RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000003 R08: 000000013011431f R09: 00007ff310180260 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ff310180260 R14: 0000000000000003 R15: 00007ffe301142e0 Showing all locks held in the system: 1 lock held by khungtaskd/31: #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6770 2 locks held by getty/5606: #0: ffff8880305650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 drivers/tty/n_tty.c:2222 1 lock held by syz.0.16/6047: #0: ffff888075e34260 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline] #0: ffff888075e34260 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557 1 lock held by syz.0.16/6048: 1 lock held by syz.1.17/6070: #0: ffff8880243157e0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline] #0: ffff8880243157e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557 1 lock held by syz.1.17/6071: 1 lock held by syz.2.18/6097: #0: ffff888075e30ca0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline] #0: ffff888075e30ca0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557 1 lock held by syz.2.18/6098: 1 lock held by syz.3.19/6123: #0: ffff888074776d60 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline] #0: ffff888074776d60 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557 1 lock held by syz.3.19/6124: 1 lock held by syz.4.20/6151: #0: ffff888075e337a0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline] #0: ffff888075e337a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557 1 lock held by syz.4.20/6152: 1 lock held by syz.5.21/6180: #0: ffff888031278ca0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline] #0: ffff888031278ca0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557 1 lock held by syz.5.21/6181: 1 lock held by syz.6.22/6216: #0: ffff888075e357e0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline] #0: ffff888075e357e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557 1 lock held by syz.6.22/6217: 1 lock held by syz.7.23/6246: #0: ffff8880312781e0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline] #0: ffff8880312781e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557 1 lock held by syz.7.23/6247: ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 nmi_cpu_backtrace+0x39e/0x3d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:328 [inline] watchdog+0xf93/0xfe0 kernel/hung_task.c:491 kthread+0x70e/0x8a0 kernel/kthread.c:463 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 6247 Comm: syz.7.23 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:__sanitizer_cov_trace_cmp1+0x0/0x90 kernel/kcov.c:275 Code: 89 3a 48 89 44 f2 08 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 14 25 08 50 e7 92 65 8b 0d 88 4e RSP: 0018:ffffc900043f7278 EFLAGS: 00000293 RAX: 0000000000000004 RBX: 0000000000000007 RCX: 000000008cdac601 RDX: ffffffff8cdac6a1 RSI: 0000000000000007 RDI: 000000000000000f RBP: ffffc900043f7450 R08: ffff888021708000 R09: 0000000000000004 R10: 0000000000000003 R11: 0000000000000000 R12: ffff88807a788c40 R13: dffffc0000000000 R14: 00001fff5effefff R15: 000000000000000f FS: 00007fe54d24b6c0(0000) GS:ffff8881257ab000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000557166bcaa58 CR3: 0000000075036000 CR4: 00000000003526f0 Call Trace: mas_safe_pivot lib/maple_tree.c:713 [inline] mas_validate_limits lib/maple_tree.c:7487 [inline] mt_validate+0xbb0/0x4380 lib/maple_tree.c:7609 validate_mm+0xb6/0x4b0 mm/vma.c:651 vma_link+0x366/0x450 mm/vma.c:1799 copy_vma+0x70c/0x940 mm/vma.c:1880 copy_vma_and_data mm/mremap.c:1184 [inline] move_vma+0x81f/0x1840 mm/mremap.c:1282 mremap_to+0x6d6/0x7a0 mm/mremap.c:1406 remap_move mm/mremap.c:1863 [inline] do_mremap mm/mremap.c:1906 [inline] __do_sys_mremap mm/mremap.c:1970 [inline] __se_sys_mremap+0xa0b/0xef0 mm/mremap.c:1938 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe54c38e9a9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fe54d24b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 RAX: ffffffffffffffda RBX: 00007fe54c5b5fa0 RCX: 00007fe54c38e9a9 RDX: 0000000000001000 RSI: 0000000000001000 RDI: 00002000005ab000 RBP: 00007fe54c410d69 R08: 0000200000ffe000 R09: 0000000000000000 R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000001 R14: 00007fe54c5b5fa0 R15: 00007ffed4cf5458 final repro crashed as (corrupted=false): INFO: task syz.0.16:6047 blocked for more than 143 seconds. Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 Blocked by coredump. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.16 state:D stack:25672 pid:6047 tgid:6047 ppid:5972 task_flags:0x40004c flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5351 [inline] __schedule+0x1737/0x4d30 kernel/sched/core.c:6954 __schedule_loop kernel/sched/core.c:7036 [inline] schedule+0x165/0x360 kernel/sched/core.c:7051 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7108 rwsem_down_read_slowpath+0x5fd/0x8f0 kernel/locking/rwsem.c:1088 __down_read_common kernel/locking/rwsem.c:1263 [inline] __down_read kernel/locking/rwsem.c:1276 [inline] down_read+0x98/0x2e0 kernel/locking/rwsem.c:1541 mmap_read_lock include/linux/mmap_lock.h:412 [inline] exit_mm+0xcc/0x2c0 kernel/exit.c:557 do_exit+0x648/0x2300 kernel/exit.c:947 do_group_exit+0x21c/0x2d0 kernel/exit.c:1100 __do_sys_exit_group kernel/exit.c:1111 [inline] __se_sys_exit_group kernel/exit.c:1109 [inline] __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1109 x64_sys_call+0x21f7/0x2200 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7ff30ff8e9a9 RSP: 002b:00007ffe30114228 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff30ff8e9a9 RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000003 R08: 000000013011431f R09: 00007ff310180260 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ff310180260 R14: 0000000000000003 R15: 00007ffe301142e0 Showing all locks held in the system: 1 lock held by khungtaskd/31: #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6770 2 locks held by getty/5606: #0: ffff8880305650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 drivers/tty/n_tty.c:2222 1 lock held by syz.0.16/6047: #0: ffff888075e34260 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline] #0: ffff888075e34260 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557 1 lock held by syz.0.16/6048: 1 lock held by syz.1.17/6070: #0: ffff8880243157e0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline] #0: ffff8880243157e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557 1 lock held by syz.1.17/6071: 1 lock held by syz.2.18/6097: #0: ffff888075e30ca0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline] #0: ffff888075e30ca0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557 1 lock held by syz.2.18/6098: 1 lock held by syz.3.19/6123: #0: ffff888074776d60 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline] #0: ffff888074776d60 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557 1 lock held by syz.3.19/6124: 1 lock held by syz.4.20/6151: #0: ffff888075e337a0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline] #0: ffff888075e337a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557 1 lock held by syz.4.20/6152: 1 lock held by syz.5.21/6180: #0: ffff888031278ca0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline] #0: ffff888031278ca0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557 1 lock held by syz.5.21/6181: 1 lock held by syz.6.22/6216: #0: ffff888075e357e0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline] #0: ffff888075e357e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557 1 lock held by syz.6.22/6217: 1 lock held by syz.7.23/6246: #0: ffff8880312781e0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock include/linux/mmap_lock.h:412 [inline] #0: ffff8880312781e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 kernel/exit.c:557 1 lock held by syz.7.23/6247: ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 nmi_cpu_backtrace+0x39e/0x3d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:328 [inline] watchdog+0xf93/0xfe0 kernel/hung_task.c:491 kthread+0x70e/0x8a0 kernel/kthread.c:463 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 6247 Comm: syz.7.23 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:__sanitizer_cov_trace_cmp1+0x0/0x90 kernel/kcov.c:275 Code: 89 3a 48 89 44 f2 08 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 14 25 08 50 e7 92 65 8b 0d 88 4e RSP: 0018:ffffc900043f7278 EFLAGS: 00000293 RAX: 0000000000000004 RBX: 0000000000000007 RCX: 000000008cdac601 RDX: ffffffff8cdac6a1 RSI: 0000000000000007 RDI: 000000000000000f RBP: ffffc900043f7450 R08: ffff888021708000 R09: 0000000000000004 R10: 0000000000000003 R11: 0000000000000000 R12: ffff88807a788c40 R13: dffffc0000000000 R14: 00001fff5effefff R15: 000000000000000f FS: 00007fe54d24b6c0(0000) GS:ffff8881257ab000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000557166bcaa58 CR3: 0000000075036000 CR4: 00000000003526f0 Call Trace: mas_safe_pivot lib/maple_tree.c:713 [inline] mas_validate_limits lib/maple_tree.c:7487 [inline] mt_validate+0xbb0/0x4380 lib/maple_tree.c:7609 validate_mm+0xb6/0x4b0 mm/vma.c:651 vma_link+0x366/0x450 mm/vma.c:1799 copy_vma+0x70c/0x940 mm/vma.c:1880 copy_vma_and_data mm/mremap.c:1184 [inline] move_vma+0x81f/0x1840 mm/mremap.c:1282 mremap_to+0x6d6/0x7a0 mm/mremap.c:1406 remap_move mm/mremap.c:1863 [inline] do_mremap mm/mremap.c:1906 [inline] __do_sys_mremap mm/mremap.c:1970 [inline] __se_sys_mremap+0xa0b/0xef0 mm/mremap.c:1938 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe54c38e9a9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fe54d24b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 RAX: ffffffffffffffda RBX: 00007fe54c5b5fa0 RCX: 00007fe54c38e9a9 RDX: 0000000000001000 RSI: 0000000000001000 RDI: 00002000005ab000 RBP: 00007fe54c410d69 R08: 0000200000ffe000 R09: 0000000000000000 R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000001 R14: 00007fe54c5b5fa0 R15: 00007ffed4cf5458