Extracting prog: 15m45.924386904s Minimizing prog: 51m16.399734215s Simplifying prog options: 5m16.77887039s Extracting C: 2m55.222189107s Simplifying C: 0s extracting reproducer from 30 programs testing a last program of every proc single: executing 8 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-add_key$keyring-add_key$user-add_key$user-keyctl$dh_compute detailed listing: executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f0000000140), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000440)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487391e09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b042a753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e2d2656a32b1b8e86d998f2810cc57ea89c96ec7aed75459f2d6e200d41670a7aaf54434592e6bd0fec", 0xe9, r1) r3 = add_key$user(&(0x7f0000000180), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000340)='\x00', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r2, r2, r3}, &(0x7f0000000240)=""/249, 0xf9, &(0x7f0000000400)={&(0x7f0000000100)={'sha512-generic\x00'}}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-mbind-memfd_create-fallocate-socket$tipc-close-mmap-ftruncate detailed listing: executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @empty, @local}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000240)=0xffffffffffffffff, 0x85, 0x0) r1 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r1, 0x0, 0x9, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) close(r2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ftruncate(r1, 0x2) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$pppoe-socket$nl_netfilter-socket$nl_netfilter-socket$l2tp-bind$inet-socket-ioctl$sock_TIOCINQ-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_PIT2-connect$inet-socket$kcm-sendmsg$inet-sendmmsg$inet-mount$9p_virtio detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000300)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4048aec9, &(0x7f00000001c0)={0x6}) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x19ee0155}}], 0x18}}, {{&(0x7f0000000380)={0x2, 0x4620, @empty}, 0x10, &(0x7f0000000500), 0x1, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io$uac1-openat$dir-fanotify_init-fanotify_mark-dup2-sendmsg$kcm-sendmsg$kcm-syz_open_dev$char_usb-socket$nl_generic-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-ioctl$FS_IOC_GETVERSION detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000200)={0x40, 0xa, 0x95, {0x95, 0xf, "0a3031df9256f35e4d2c5586e254e115e9aa6b077f4d3ea1427a8794ae39465f12a195ac314fe0cf502d7adb97e4a73ce98930bbff63acd4e524b067e5bb2c1169ab7f4f8793e691bad54128afb90c9fc93c3af84d0e34d5481b0661cdfbf041d272b294b0037a8f87f14cf4b6f4232e7cdb8b1afad5ea8a500e4cc8524e4913ffc32d99f8c50dad319e9b656ae154553518d8"}}, &(0x7f00000003c0)={0x0, 0x3, 0xff, @string={0xff, 0x3, "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"}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000500)={0x20, 0x6, 0x7d, "0128c877aff643c8e382cedca44666db2c5df953830d909420050b66b0e663b4ad59c46a41103413cc0396fd5ba7f42bb5da1ba03edc7e799fe7aca6b16bbc8616761d0e06e20622729b8f646875adc1af0dcf2dcc3869813ce3b59435d25accc97074b86e2f12631bb8d5d58ffdf2e51b7e49d8d1a4ee026869f225de"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0xf4}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000002c0)={0x20, 0x81, 0x2, "fd6e"}, &(0x7f00000005c0)={0x20, 0x82, 0x3, "34fb9b"}, &(0x7f0000000600)={0x20, 0x83, 0x3, "033e3f"}, &(0x7f0000000640)={0x20, 0x84, 0x3, "6bab01"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "e132f9"}}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x24, 0x1) fanotify_mark(r2, 0x39, 0x1a, r1, 0x0) dup2(r2, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c", 0xd}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x20, r5, 0x1, 0x70bd2a, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmsg$nl_route_sched-getsockname$packet-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-openat$cdrom-ioctl$CDROM_SEND_PACKET-sendmmsg-syz_open_procfs-preadv-openat$mixer-ioctl$mixer_OSS_ALSAEMULVER-mknodat$null-ftruncate-utimes detailed listing: executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x6}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {}, {0x1c, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$CDROM_SEND_PACKET(r3, 0x2282, &(0x7f0000000180)={"7bd6210000b08df6723d3fd7", 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x5a9d, 0x2, 0x0}) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x80, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r5, 0x80044df9, &(0x7f0000000080)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8, 0x103) ftruncate(r4, 0x0) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmsg$nl_route_sched-getsockname$packet-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-openat$cdrom-ioctl$CDROM_SEND_PACKET-sendmmsg-syz_open_procfs-preadv-openat$mixer-ioctl$mixer_OSS_ALSAEMULVER-mknodat$null-ftruncate-utimes detailed listing: executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x6}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {}, {0x1c, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$CDROM_SEND_PACKET(r3, 0x2282, &(0x7f0000000180)={"7bd6210000b08df6723d3fd7", 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x5a9d, 0x2, 0x0}) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x80, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r5, 0x80044df9, &(0x7f0000000080)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8, 0x103) ftruncate(r4, 0x0) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-socket$packet-getsockopt$packet_int-sendmsg$nl_route_sched-socket$netlink-sendmsg$nl_route_sched-sendmmsg-syz_init_net_socket$bt_hci-syz_init_net_socket$bt_hci-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-readv-ioctl$sock_bt_hci-ioctl$TIOCVHANGUP-syz_open_dev$video4linux-ioctl$TIOCVHANGUP-syz_open_dev$sndpcmp detailed listing: executing program 0: syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x18, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x401, 0x3d3, 0x3, 0x3ff, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/237, 0xed}, {&(0x7f0000000200)=""/170, 0xaa}, {&(0x7f0000000080)=""/6, 0x6}], 0x3) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_open_dev$video4linux(0x0, 0xff, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xe2802) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-socket$packet-getsockopt$packet_int-sendmsg$nl_route_sched-socket$netlink-sendmsg$nl_route_sched-sendmmsg-syz_init_net_socket$bt_hci-syz_init_net_socket$bt_hci-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-readv-ioctl$sock_bt_hci-ioctl$TIOCVHANGUP-syz_open_dev$video4linux-ioctl$TIOCVHANGUP-syz_open_dev$sndpcmp detailed listing: executing program 0: syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x18, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x401, 0x3d3, 0x3, 0x3ff, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/237, 0xed}, {&(0x7f0000000200)=""/170, 0xaa}, {&(0x7f0000000080)=""/6, 0x6}], 0x3) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_open_dev$video4linux(0x0, 0xff, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xe2802) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 30s testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 17, 19, 40, 18, 2, 10, 11, 23, 18, 18, 16, 16, 16, 14, 7, 10, 16, 3, 6, 8, 6, 10, 3, 9, 9, 14, 16, 10, 5] detailed listing: executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYBLOB="f33fb2ef70351f44a2b11b182945f4e526fab988adaf8652c9c837ee22c05c11581d390289eb795346c45c62ad59d0b4089ab657ede2cbe0c5c65159080ecc09e2113704879207f5e43cfcc0be1702e169f3563a96dd4813fe03ba9ec430c742e510a594d28b4028d8095b9d808cb2905cde5ac7b007ea9b12d2", @ANYRES32=0x41424344, @ANYBLOB="5cf8008700780000f2c5f404073b98a15e31cde214e74e7814b837367c965ec038d20d95f3f2200615c8dad9f5ec160175ed73138307a900c0fc1437c52fc507644d4f7a33cb4da50e619917212b08c9da7745d1c5d9a0e3c3991650c089a024d6cde8bcb19d22ccb46e962685365669bbafce3d092fa8ed5991012099da773723217ffec65f5a7e0aa8b20400e836be239f6a7479953265cc1da2e1c975115bb83f1944fa42f1437aaa9aa5fd28a382ebdf6169ec4fb06efb0f73e2627796ad1167318dd77abf14661accce056aab2492f05e2c5452d25fd0ceac826c8e4f87ce17e9b1faf33226b92b1f2de907c9a087a945d34123d494"], 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYBLOB="f33fb2ef70351f44a2b11b182945f4e526fab988adaf8652c9c837ee22c05c11581d390289eb795346c45c62ad59d0b4089ab657ede2cbe0c5c65159080ecc09e2113704879207f5e43cfcc0be1702e169f3563a96dd4813fe03ba9ec430c742e510a594d28b4028d8095b9d808cb2905cde5ac7b007ea9b12d2", @ANYRES32=0x41424344, @ANYBLOB="5cf8008700780000f2c5f404073b98a15e31cde214e74e7814b837367c965ec038d20d95f3f2200615c8dad9f5ec160175ed73138307a900c0fc1437c52fc507644d4f7a33cb4da50e619917212b08c9da7745d1c5d9a0e3c3991650c089a024d6cde8bcb19d22ccb46e962685365669bbafce3d092fa8ed5991012099da773723217ffec65f5a7e0aa8b20400e836be239f6a7479953265cc1da2e1c975115bb83f1944fa42f1437aaa9aa5fd28a382ebdf6169ec4fb06efb0f73e2627796ad1167318dd77abf14661accce056aab2492f05e2c5452d25fd0ceac826c8e4f87ce17e9b1faf33226b92b1f2de907c9a087a945d34123d494"], 0x0) (async) executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000000400)={0x2020}, 0x2020) r4 = io_uring_setup(0x3458, &(0x7f0000000100)={0x0, 0xffffeffa, 0x18, 0x2, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) request_key(&(0x7f0000000540)='blacklist\x00', &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) close(0x3) executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000002140)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x8, 0x8, 0x401, 0x8, 0x1}, &(0x7f0000002080)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={r2, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x7d, &(0x7f0000000040)={r3, 0x7}, &(0x7f0000000080)=0x8) r4 = socket$pptp(0x18, 0x1, 0x2) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f00000020c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x1008001, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x78, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x2}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x3}, @IFLA_GENEVE_ID={0x8, 0x1, 0x2}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x100000000000, 0x5], 0xffff1000}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x100000000000, 0x5], 0xffff1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r5, 0x0, 0x1, 0x0, &(0x7f0000001c80)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)=@v2={0x3, 0x1, 0x8, 0x7}, 0x9, 0x1) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0x44, 0x4, 0x478, 0xffffffff, 0x0, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0xa8, 0x1d0, 0x8502}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x11}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'veth0_virt_wifi\x00', {0x5}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xab, 0x24, "aeaebfccef9bce1fd124c2479745f617049cd64b82629795273b1b27fa25"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0x44, 0x4, 0x478, 0xffffffff, 0x0, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0xa8, 0x1d0, 0x8502}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x11}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'veth0_virt_wifi\x00', {0x5}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xab, 0x24, "aeaebfccef9bce1fd124c2479745f617049cd64b82629795273b1b27fa25"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) chdir(&(0x7f00000001c0)='./bus\x00') (async) chdir(&(0x7f00000001c0)='./bus\x00') r6 = socket$inet6(0xa, 0x80002, 0x4ecc) sendmmsg$inet6(r6, &(0x7f0000005dc0)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x2, @empty, 0xd8}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@rthdr_2292={{0x18, 0x29, 0x3b, {0x6c, 0x0, 0x0, 0xc}}}], 0x18}}], 0x1, 0x24009c00) utime(&(0x7f0000000000)='./file0\x00', 0x0) (async) utime(&(0x7f0000000000)='./file0\x00', 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0xc3}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x30}, 0x1, 0xffffa888}, 0x8810) (async) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0xc3}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x30}, 0x1, 0xffffa888}, 0x8810) r8 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_pidfd_open(r8, 0x0) (async) r9 = syz_pidfd_open(r8, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r9, 0xff05) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x1dd, 0x3, 0x5, 0xfffffff8}, {0xfffa, 0xb5, 0x5f, 0x40}, {0xc7, 0xf4, 0x3, 0x8}, {0x0, 0xfe, 0x10, 0x4}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000180)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f00000001c0), 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000081"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0xc1, 0x7f, 0x20203243, 0x2, [0x2], [0x800, 0x0, 0x80, 0x40], [0xfffffffc, 0x822], [0x40000000000000, 0x7fff]}) executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xad, 0x2, 0x1, 0x0, 0xf7}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x0, 0xfffffffc}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r3], 0x3c}, 0x1, 0x11}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f00000000c0)=0x189) executing program 2: r0 = gettid() r1 = gettid() rt_sigqueueinfo(r1, 0x21, &(0x7f00000002c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="280000002b000bf9dc0adc317e6f48250900000008000200160001000c0001"], 0x28}}, 0x0) r3 = epoll_create(0x7) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) read(r4, &(0x7f00000001c0)=""/36, 0x24) ptrace$peeksig(0x4209, r1, &(0x7f0000000040)={0x0, 0x0, 0x4}, &(0x7f0000000340)=[{}, {}, {}, {}]) kcmp$KCMP_EPOLL_TFD(r1, 0xffffffffffffffff, 0x7, r2, &(0x7f0000000000)={r3, 0xffffffffffffffff, 0x1}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0xffffff95}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_clone(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000001ac0)=@ethtool_cmd={0x4a, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, [0x2]}}) socket$nl_sock_diag(0x10, 0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000300)=0x101, 0x4) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @private}}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) read$FUSE(r3, &(0x7f0000001680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$CDROMREADTOCENTRY(r3, 0x5306, &(0x7f0000000540)={0x40, 0xb, 0x9, 0x1, @msf={0x4, 0x9, 0x81}, 0x11}) sendmmsg$unix(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)=@file={0x1, './file0/../file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f00000001c0)="29569c889bf8851fd4d2ab76072a236a533893df98cc49978b44041f105c0741953ad14abb5642d490f37e4dbee477eff19281a435282ff58fcb58f74a688e5dbb693cab91c160a6db9ae4255675a42c2a755815d47296c8619dc11d61d396b338f00d3b07bc8d651adf87241acd7a6ea2855dba4c1e519022f19010f847853147e215d96fd0771eac173172615e0e243fd3cb28917fde62ec79db7f6917bf70b046262b6af2696ec0a14bcca653dfbe5383d9d09d245768249651e4bcc5f32ccc38bf86d914a85b3ee24c6a5faeaf637ccc60d2309a822b3733f860d4f3412df02c10fc", 0xe4}], 0x2, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r1, r5, r6}}}], 0x20, 0x800}}], 0x1, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) executing program 3: syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x18, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x401, 0x3d3, 0x3, 0x3ff, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/237, 0xed}, {&(0x7f0000000200)=""/170, 0xaa}, {&(0x7f0000000080)=""/6, 0x6}], 0x3) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_open_dev$video4linux(0x0, 0xff, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xe2802) executing program 32: syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x18, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x401, 0x3d3, 0x3, 0x3ff, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/237, 0xed}, {&(0x7f0000000200)=""/170, 0xaa}, {&(0x7f0000000080)=""/6, 0x6}], 0x3) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_open_dev$video4linux(0x0, 0xff, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xe2802) executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000040)={0x20, 0x2, 0x0, 0x200804, 0x7}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x4, 0x0, &(0x7f0000000080)) (async) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x4, 0x0, &(0x7f0000000080)) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000100)={@mcast1}, 0x14) (async) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000100)={@mcast1}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x30}}, 0x4010080) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002400010026bd700001dbdf251cf9ffff06000300"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) executing program 2: r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x6}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {}, {0x1c, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$CDROM_SEND_PACKET(r3, 0x2282, &(0x7f0000000180)={"7bd6210000b08df6723d3fd7", 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x5a9d, 0x2, 0x0}) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x80, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r5, 0x80044df9, &(0x7f0000000080)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8, 0x103) ftruncate(r4, 0x0) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) executing program 33: r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x6}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {}, {0x1c, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$CDROM_SEND_PACKET(r3, 0x2282, &(0x7f0000000180)={"7bd6210000b08df6723d3fd7", 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x5a9d, 0x2, 0x0}) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x80, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r5, 0x80044df9, &(0x7f0000000080)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8, 0x103) ftruncate(r4, 0x0) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0xfffffeb1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000041}, 0x4044) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x4000880) executing program 0: socket$nl_rdma(0x10, 0x3, 0x14) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) getsockopt$SO_COOKIE(r2, 0x1, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0x8) r3 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x4}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) executing program 0: syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) accept$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000240)=0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000f400010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000240000000001800038014000100626f6e64300000000000000000000000080001400000000048000000180a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c000380140001"], 0xe8}}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000200)=0x8000) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000300)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4048aec9, &(0x7f00000001c0)={0x6}) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x19ee0155}}], 0x18}}, {{&(0x7f0000000380)={0x2, 0x4620, @empty}, 0x10, &(0x7f0000000500), 0x1, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000dd4076d2b24288a6414fbb4281bf8e4faac3dbd9b4806b37ba84d3c84afbdca7c16cf05032602f00dbc47d88a63726ba260a1064862a61519279e0f650556d5b10b2260a437bbbdfbc35852d477daaa2f683f0d9da76fdd98735090a8de5a159e2cb98a5e1eb9c3975846aa2fe0f6d3416e89a54fae779637aa55bcb601e0a27fc976acbf270a348698cb46c432ab428292b16179a13d9714e4f63d724bf80147f59d41c4805bb62afb61b9bbb80af202b1fc500"/210, @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES64=r0, @ANYBLOB="08000a00d2316bd93d1229f4b26827090906e1d1864e91d3d514bfe74de2"], 0x44}}, 0x20008040) executing program 1: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa35f088be"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001e80), 0x41, 0x0) r1 = dup(r0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x545d, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400008ffffffff000000000000000095", @ANYRES32=r2, @ANYRES64=r0, @ANYRES16=r0, @ANYRESDEC=0x0, @ANYRES64=r1, @ANYRES16=0x0, @ANYRES16=r1, @ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = dup(r3) landlock_restrict_self(r4, 0x2) executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) getrlimit(0xd, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x8d, 0x0, 0x1}]}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) (async) getrlimit(0xd, &(0x7f0000000040)) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x8d, 0x0, 0x1}]}) (async) executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000192c0)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce\x04\x9b\xd0X\aA0S\x02k\xdb\x12\v\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\xbbGh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5_J\x1en\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}]}, 0xe3) close(r0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'syzkaller1\x00', @ifru_data=0x0}}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r3], 0x1c}}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) executing program 0: bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xe, &(0x7f0000000680)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x82) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000d00)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc9, @none, 0x1, 0x8}}}, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=@gettaction={0x14c, 0x32, 0x1, 0x70bd28, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}]}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf63}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x608}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x14c}}, 0x4000052) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000040)=0x68) (async) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) getsockname(r3, &(0x7f0000000380)=@qipcrtr, &(0x7f0000000400)=0x80) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000480)={0x0, "b500e2279c2996817bb959eb2b238deda525e1dbdeffafbf2500"}) executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) utime(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) executing program 0: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000200)={0x40, 0xa, 0x95, {0x95, 0xf, "0a3031df9256f35e4d2c5586e254e115e9aa6b077f4d3ea1427a8794ae39465f12a195ac314fe0cf502d7adb97e4a73ce98930bbff63acd4e524b067e5bb2c1169ab7f4f8793e691bad54128afb90c9fc93c3af84d0e34d5481b0661cdfbf041d272b294b0037a8f87f14cf4b6f4232e7cdb8b1afad5ea8a500e4cc8524e4913ffc32d99f8c50dad319e9b656ae154553518d8"}}, &(0x7f00000003c0)={0x0, 0x3, 0xff, @string={0xff, 0x3, "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"}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000500)={0x20, 0x6, 0x7d, "0128c877aff643c8e382cedca44666db2c5df953830d909420050b66b0e663b4ad59c46a41103413cc0396fd5ba7f42bb5da1ba03edc7e799fe7aca6b16bbc8616761d0e06e20622729b8f646875adc1af0dcf2dcc3869813ce3b59435d25accc97074b86e2f12631bb8d5d58ffdf2e51b7e49d8d1a4ee026869f225de"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0xf4}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000002c0)={0x20, 0x81, 0x2, "fd6e"}, &(0x7f00000005c0)={0x20, 0x82, 0x3, "34fb9b"}, &(0x7f0000000600)={0x20, 0x83, 0x3, "033e3f"}, &(0x7f0000000640)={0x20, 0x84, 0x3, "6bab01"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "e132f9"}}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x24, 0x1) fanotify_mark(r2, 0x39, 0x1a, r1, 0x0) dup2(r2, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c", 0xd}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x20, r5, 0x1, 0x70bd2a, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000300)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4048aec9, &(0x7f00000001c0)={0x6}) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x19ee0155}}], 0x18}}, {{&(0x7f0000000380)={0x2, 0x4620, @empty}, 0x10, &(0x7f0000000500), 0x1, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @empty, @local}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000240)=0xffffffffffffffff, 0x85, 0x0) r1 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r1, 0x0, 0x9, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) close(r2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ftruncate(r1, 0x2) executing program 5: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f0000000140), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000440)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487391e09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b042a753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e2d2656a32b1b8e86d998f2810cc57ea89c96ec7aed75459f2d6e200d41670a7aaf54434592e6bd0fec", 0xe9, r1) r3 = add_key$user(&(0x7f0000000180), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000340)='\x00', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r2, r2, r3}, &(0x7f0000000240)=""/249, 0xf9, &(0x7f0000000400)={&(0x7f0000000100)={'sha512-generic\x00'}}) program did not crash replaying the whole log did not cause a kernel crash single: executing 8 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-add_key$keyring-add_key$user-add_key$user-keyctl$dh_compute detailed listing: executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f0000000140), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000440)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487391e09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b042a753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e2d2656a32b1b8e86d998f2810cc57ea89c96ec7aed75459f2d6e200d41670a7aaf54434592e6bd0fec", 0xe9, r1) r3 = add_key$user(&(0x7f0000000180), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000340)='\x00', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r2, r2, r3}, &(0x7f0000000240)=""/249, 0xf9, &(0x7f0000000400)={&(0x7f0000000100)={'sha512-generic\x00'}}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet-bpf$PROG_LOAD_XDP-bpf$BPF_PROG_TEST_RUN-mbind-memfd_create-fallocate-socket$tipc-close-mmap-ftruncate detailed listing: executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @empty, @local}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000240)=0xffffffffffffffff, 0x85, 0x0) r1 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r1, 0x0, 0x9, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) close(r2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ftruncate(r1, 0x2) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$pppoe-socket$nl_netfilter-socket$nl_netfilter-socket$l2tp-bind$inet-socket-ioctl$sock_TIOCINQ-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_PIT2-connect$inet-socket$kcm-sendmsg$inet-sendmmsg$inet-mount$9p_virtio detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000300)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4048aec9, &(0x7f00000001c0)={0x6}) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x19ee0155}}], 0x18}}, {{&(0x7f0000000380)={0x2, 0x4620, @empty}, 0x10, &(0x7f0000000500), 0x1, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) program crashed: WARNING: refcount bug in p9_req_put single: successfully extracted reproducer found reproducer with 16 syscalls minimizing guilty program testing program (duration=1m45.655632606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$pppoe-socket$nl_netfilter-socket$nl_netfilter-socket$l2tp-bind$inet-socket-ioctl$sock_TIOCINQ-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_PIT2-connect$inet-socket$kcm-sendmsg$inet-sendmmsg$inet detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000300)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4048aec9, &(0x7f00000001c0)={0x6}) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x19ee0155}}], 0x18}}, {{&(0x7f0000000380)={0x2, 0x4620, @empty}, 0x10, &(0x7f0000000500), 0x1, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x3, 0x0) program did not crash testing program (duration=1m45.655632606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$pppoe-socket$nl_netfilter-socket$nl_netfilter-socket$l2tp-bind$inet-socket-ioctl$sock_TIOCINQ-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_PIT2-connect$inet-socket$kcm-sendmsg$inet-mount$9p_virtio detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000300)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4048aec9, &(0x7f00000001c0)={0x6}) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) program did not crash testing program (duration=1m45.655632606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$pppoe-socket$nl_netfilter-socket$nl_netfilter-socket$l2tp-bind$inet-socket-ioctl$sock_TIOCINQ-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_PIT2-connect$inet-socket$kcm-sendmmsg$inet-mount$9p_virtio detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000300)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4048aec9, &(0x7f00000001c0)={0x6}) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) socket$kcm(0x10, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x19ee0155}}], 0x18}}, {{&(0x7f0000000380)={0x2, 0x4620, @empty}, 0x10, &(0x7f0000000500), 0x1, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) program did not crash testing program (duration=1m45.655632606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$pppoe-socket$nl_netfilter-socket$nl_netfilter-socket$l2tp-bind$inet-socket-ioctl$sock_TIOCINQ-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_PIT2-connect$inet-sendmsg$inet-sendmmsg$inet-mount$9p_virtio detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000300)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4048aec9, &(0x7f00000001c0)={0x6}) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x19ee0155}}], 0x18}}, {{&(0x7f0000000380)={0x2, 0x4620, @empty}, 0x10, &(0x7f0000000500), 0x1, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) program did not crash testing program (duration=1m45.655632606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$pppoe-socket$nl_netfilter-socket$nl_netfilter-socket$l2tp-bind$inet-socket-ioctl$sock_TIOCINQ-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_PIT2-socket$kcm-sendmsg$inet-sendmmsg$inet-mount$9p_virtio detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000300)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4048aec9, &(0x7f00000001c0)={0x6}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x19ee0155}}], 0x18}}, {{&(0x7f0000000380)={0x2, 0x4620, @empty}, 0x10, &(0x7f0000000500), 0x1, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) program crashed: WARNING: refcount bug in p9_req_put testing program (duration=1m45.655632606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$pppoe-socket$nl_netfilter-socket$nl_netfilter-socket$l2tp-bind$inet-socket-ioctl$sock_TIOCINQ-openat$kvm-ioctl$KVM_CREATE_VM-socket$kcm-sendmsg$inet-sendmmsg$inet-mount$9p_virtio detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000300)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x19ee0155}}], 0x18}}, {{&(0x7f0000000380)={0x2, 0x4620, @empty}, 0x10, &(0x7f0000000500), 0x1, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) program crashed: WARNING: refcount bug in p9_req_put testing program (duration=1m45.655632606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$pppoe-socket$nl_netfilter-socket$nl_netfilter-socket$l2tp-bind$inet-socket-ioctl$sock_TIOCINQ-openat$kvm-socket$kcm-sendmsg$inet-sendmmsg$inet-mount$9p_virtio detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000300)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x19ee0155}}], 0x18}}, {{&(0x7f0000000380)={0x2, 0x4620, @empty}, 0x10, &(0x7f0000000500), 0x1, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) program crashed: WARNING: refcount bug in p9_req_put testing program (duration=1m45.655632606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$pppoe-socket$nl_netfilter-socket$nl_netfilter-socket$l2tp-bind$inet-socket-ioctl$sock_TIOCINQ-socket$kcm-sendmsg$inet-sendmmsg$inet-mount$9p_virtio detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000300)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x19ee0155}}], 0x18}}, {{&(0x7f0000000380)={0x2, 0x4620, @empty}, 0x10, &(0x7f0000000500), 0x1, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) program crashed: WARNING: refcount bug in p9_req_put testing program (duration=1m45.655632606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$pppoe-socket$nl_netfilter-socket$nl_netfilter-socket$l2tp-bind$inet-socket-socket$kcm-sendmsg$inet-sendmmsg$inet-mount$9p_virtio detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socket(0x840000000002, 0x3, 0xff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x19ee0155}}], 0x18}}, {{&(0x7f0000000380)={0x2, 0x4620, @empty}, 0x10, &(0x7f0000000500), 0x1, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) program crashed: WARNING: refcount bug in p9_req_put testing program (duration=1m45.655632606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$pppoe-socket$nl_netfilter-socket$nl_netfilter-socket$l2tp-bind$inet-socket$kcm-sendmsg$inet-sendmmsg$inet-mount$9p_virtio detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x19ee0155}}], 0x18}}, {{&(0x7f0000000380)={0x2, 0x4620, @empty}, 0x10, &(0x7f0000000500), 0x1, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) program did not crash testing program (duration=1m45.655632606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$pppoe-socket$nl_netfilter-socket$nl_netfilter-socket$l2tp-socket-socket$kcm-sendmsg$inet-sendmmsg$inet-mount$9p_virtio detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) socket(0x840000000002, 0x3, 0xff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x19ee0155}}], 0x18}}, {{&(0x7f0000000380)={0x2, 0x4620, @empty}, 0x10, &(0x7f0000000500), 0x1, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) program did not crash testing program (duration=1m45.655632606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$pppoe-socket$nl_netfilter-socket$nl_netfilter-bind$inet-socket-socket$kcm-sendmsg$inet-sendmmsg$inet-mount$9p_virtio detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socket(0x840000000002, 0x3, 0xff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x19ee0155}}], 0x18}}, {{&(0x7f0000000380)={0x2, 0x4620, @empty}, 0x10, &(0x7f0000000500), 0x1, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) program did not crash testing program (duration=1m45.655632606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$pppoe-socket$nl_netfilter-socket$l2tp-bind$inet-socket-socket$kcm-sendmsg$inet-sendmmsg$inet-mount$9p_virtio detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socket(0x840000000002, 0x3, 0xff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x19ee0155}}], 0x18}}, {{&(0x7f0000000380)={0x2, 0x4620, @empty}, 0x10, &(0x7f0000000500), 0x1, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) program crashed: WARNING: refcount bug in p9_req_put testing program (duration=1m45.655632606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$pppoe-socket$l2tp-bind$inet-socket-socket$kcm-sendmsg$inet-sendmmsg$inet-mount$9p_virtio detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) socket$pppoe(0x18, 0x1, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socket(0x840000000002, 0x3, 0xff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x19ee0155}}], 0x18}}, {{&(0x7f0000000380)={0x2, 0x4620, @empty}, 0x10, &(0x7f0000000500), 0x1, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) program crashed: WARNING: refcount bug in p9_req_put testing program (duration=1m45.655632606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$l2tp-bind$inet-socket-socket$kcm-sendmsg$inet-sendmmsg$inet-mount$9p_virtio detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socket(0x840000000002, 0x3, 0xff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x19ee0155}}], 0x18}}, {{&(0x7f0000000380)={0x2, 0x4620, @empty}, 0x10, &(0x7f0000000500), 0x1, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) program crashed: WARNING: refcount bug in p9_req_put testing program (duration=1m45.655632606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$l2tp-bind$inet-socket-socket$kcm-sendmsg$inet-sendmmsg$inet-mount$9p_virtio detailed listing: executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socket(0x840000000002, 0x3, 0xff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x19ee0155}}], 0x18}}, {{&(0x7f0000000380)={0x2, 0x4620, @empty}, 0x10, &(0x7f0000000500), 0x1, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) program did not crash testing program (duration=1m45.655632606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$l2tp-bind$inet-socket-socket$kcm-sendmsg$inet-sendmmsg$inet-mount$9p_virtio detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x1e2) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socket(0x840000000002, 0x3, 0xff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x19ee0155}}], 0x18}}, {{&(0x7f0000000380)={0x2, 0x4620, @empty}, 0x10, &(0x7f0000000500), 0x1, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) program did not crash testing program (duration=1m45.655632606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$l2tp-bind$inet-socket-socket$kcm-sendmsg$inet-sendmmsg$inet-mount$9p_virtio detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x19ee0155}}], 0x18}}, {{&(0x7f0000000380)={0x2, 0x4620, @empty}, 0x10, &(0x7f0000000500), 0x1, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) program did not crash testing program (duration=1m45.655632606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$l2tp-bind$inet-socket-socket$kcm-sendmsg$inet-sendmmsg$inet-mount$9p_virtio detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socket(0x840000000002, 0x3, 0xff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x19ee0155}}], 0x18}}, {{&(0x7f0000000380)={0x2, 0x4620, @empty}, 0x10, &(0x7f0000000500), 0x1, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) program did not crash testing program (duration=1m45.655632606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$l2tp-bind$inet-socket-socket$kcm-sendmsg$inet-sendmmsg$inet-mount$9p_virtio detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socket(0x840000000002, 0x3, 0xff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x19ee0155}}], 0x18}}, {{&(0x7f0000000380)={0x2, 0x4620, @empty}, 0x10, &(0x7f0000000500), 0x1, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) program crashed: WARNING: refcount bug in p9_req_put testing program (duration=1m45.655632606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$l2tp-bind$inet-socket-socket$kcm-sendmsg$inet-sendmmsg$inet-mount$9p_virtio detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socket(0x840000000002, 0x3, 0xff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) program crashed: WARNING: refcount bug in p9_req_put testing program (duration=1m45.655632606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$l2tp-bind$inet-socket-socket$kcm-sendmsg$inet-sendmmsg$inet-mount$9p_virtio detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socket(0x840000000002, 0x3, 0xff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) program did not crash testing program (duration=1m45.655632606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$l2tp-bind$inet-socket-socket$kcm-sendmsg$inet-sendmmsg$inet-mount$9p_virtio detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socket(0x840000000002, 0x3, 0xff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) program did not crash testing program (duration=1m45.655632606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$l2tp-bind$inet-socket-socket$kcm-sendmsg$inet-sendmmsg$inet-mount$9p_virtio detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socket(0x840000000002, 0x3, 0xff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) program did not crash testing program (duration=1m45.655632606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$l2tp-bind$inet-socket-socket$kcm-sendmsg$inet-sendmmsg$inet-mount$9p_virtio detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socket(0x840000000002, 0x3, 0xff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) program did not crash testing program (duration=1m45.655632606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$l2tp-bind$inet-socket-socket$kcm-sendmsg$inet-sendmmsg$inet-mount$9p_virtio detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socket(0x840000000002, 0x3, 0xff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB]) program did not crash extracting C reproducer testing compiled C program (duration=1m45.655632606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$l2tp-bind$inet-socket-socket$kcm-sendmsg$inet-sendmmsg$inet-mount$9p_virtio program did not crash simplifying guilty program options testing program (duration=1m45.655632606s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$l2tp-bind$inet-socket-socket$kcm-sendmsg$inet-sendmmsg$inet-mount$9p_virtio detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socket(0x840000000002, 0x3, 0xff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) program did not crash testing program (duration=1m45.655632606s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$l2tp-bind$inet-socket-socket$kcm-sendmsg$inet-sendmmsg$inet-mount$9p_virtio detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socket(0x840000000002, 0x3, 0xff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) program did not crash reproducing took 1h15m14.325210786s repro crashed as (corrupted=false): 9p: Unknown Cache mode or invalid value fs 9pnet: Tag 65535 still in use ------------[ cut here ]------------ refcount_t: underflow; use-after-free. WARNING: CPU: 2 PID: 6261 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 lib/refcount.c:28 Modules linked in: CPU: 2 UID: 0 PID: 6261 Comm: syz.2.58 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:refcount_warn_saturate+0x14a/0x210 lib/refcount.c:28 Code: ff 89 de e8 08 ab eb fc 84 db 0f 85 66 ff ff ff e8 1b b0 eb fc c6 05 5e 26 9f 0b 01 90 48 c7 c7 40 0f f4 8b e8 f7 40 ab fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 f8 af eb fc 0f b6 1d 39 26 9f 0b 31 RSP: 0018:ffffc900033479e0 EFLAGS: 00010282 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817acff8 RDX: ffff88802d434880 RSI: ffffffff817ad005 RDI: 0000000000000001 RBP: ffff88802814aaa8 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802814aaa8 R13: ffff88802ef29000 R14: dffffc0000000000 R15: 1ffff92000668f47 FS: 00007f53b8b516c0(0000) GS:ffff8880d6bb3000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000001000 CR3: 0000000036166000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __refcount_sub_and_test include/linux/refcount.h:400 [inline] __refcount_dec_and_test include/linux/refcount.h:432 [inline] refcount_dec_and_test include/linux/refcount.h:450 [inline] p9_req_put+0x1ec/0x250 net/9p/client.c:404 p9_tag_cleanup net/9p/client.c:431 [inline] p9_client_destroy+0x22b/0x480 net/9p/client.c:1086 v9fs_session_init+0xbab/0x1a80 fs/9p/v9fs.c:490 v9fs_mount+0xc5/0xa30 fs/9p/vfs_super.c:122 legacy_get_tree+0x109/0x220 fs/fs_context.c:662 vfs_get_tree+0x8b/0x340 fs/super.c:1759 do_new_mount fs/namespace.c:3879 [inline] path_mount+0x14d4/0x1f30 fs/namespace.c:4206 do_mount fs/namespace.c:4219 [inline] __do_sys_mount fs/namespace.c:4430 [inline] __se_sys_mount fs/namespace.c:4407 [inline] __x64_sys_mount+0x28d/0x310 fs/namespace.c:4407 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0x260 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f53b7d8d169 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f53b8b51038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f53b7fa5fa0 RCX: 00007f53b7d8d169 RDX: 00002000000004c0 RSI: 0000200000000480 RDI: 00002000000001c0 RBP: 00007f53b7e0e990 R08: 0000200000000840 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f53b7fa5fa0 R15: 00007ffc0d133e78 final repro crashed as (corrupted=false): 9p: Unknown Cache mode or invalid value fs 9pnet: Tag 65535 still in use ------------[ cut here ]------------ refcount_t: underflow; use-after-free. WARNING: CPU: 2 PID: 6261 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 lib/refcount.c:28 Modules linked in: CPU: 2 UID: 0 PID: 6261 Comm: syz.2.58 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:refcount_warn_saturate+0x14a/0x210 lib/refcount.c:28 Code: ff 89 de e8 08 ab eb fc 84 db 0f 85 66 ff ff ff e8 1b b0 eb fc c6 05 5e 26 9f 0b 01 90 48 c7 c7 40 0f f4 8b e8 f7 40 ab fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 f8 af eb fc 0f b6 1d 39 26 9f 0b 31 RSP: 0018:ffffc900033479e0 EFLAGS: 00010282 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817acff8 RDX: ffff88802d434880 RSI: ffffffff817ad005 RDI: 0000000000000001 RBP: ffff88802814aaa8 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802814aaa8 R13: ffff88802ef29000 R14: dffffc0000000000 R15: 1ffff92000668f47 FS: 00007f53b8b516c0(0000) GS:ffff8880d6bb3000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000001000 CR3: 0000000036166000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __refcount_sub_and_test include/linux/refcount.h:400 [inline] __refcount_dec_and_test include/linux/refcount.h:432 [inline] refcount_dec_and_test include/linux/refcount.h:450 [inline] p9_req_put+0x1ec/0x250 net/9p/client.c:404 p9_tag_cleanup net/9p/client.c:431 [inline] p9_client_destroy+0x22b/0x480 net/9p/client.c:1086 v9fs_session_init+0xbab/0x1a80 fs/9p/v9fs.c:490 v9fs_mount+0xc5/0xa30 fs/9p/vfs_super.c:122 legacy_get_tree+0x109/0x220 fs/fs_context.c:662 vfs_get_tree+0x8b/0x340 fs/super.c:1759 do_new_mount fs/namespace.c:3879 [inline] path_mount+0x14d4/0x1f30 fs/namespace.c:4206 do_mount fs/namespace.c:4219 [inline] __do_sys_mount fs/namespace.c:4430 [inline] __se_sys_mount fs/namespace.c:4407 [inline] __x64_sys_mount+0x28d/0x310 fs/namespace.c:4407 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0x260 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f53b7d8d169 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f53b8b51038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f53b7fa5fa0 RCX: 00007f53b7d8d169 RDX: 00002000000004c0 RSI: 0000200000000480 RDI: 00002000000001c0 RBP: 00007f53b7e0e990 R08: 0000200000000840 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f53b7fa5fa0 R15: 00007ffc0d133e78