Extracting prog: 3m47.209637175s
Minimizing prog: 54m54.512712532s
Simplifying prog options: 0s
Extracting C: 31.101192661s
Simplifying C: 25m44.647413859s


extracting reproducer from 24 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-close-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-openat$nullb-dup-mmap-ioctl$DRM_IOCTL_AGP_ALLOC-ioctl$DRM_IOCTL_AGP_UNBIND-ioctl$KVM_SET_MSRS-mkdirat-mount-openat-syz_open_dev$sndctrl-getpid-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-openat-fstat-ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY-read$FUSE-execveat$binfmt-close
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0x7c1f1000) (async, rerun: 64)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x5ebf3503, <r7=>0x0, 0x1}) (rerun: 64)
ioctl$DRM_IOCTL_AGP_UNBIND(r6, 0x40106437, &(0x7f0000000100)={r7, 0x2}) (async)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000f1, 0x0, 0x6}]}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
r9 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x40000) (async)
r10 = getpid()
sched_setaffinity(r10, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r9, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, r10, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r8, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
r11 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0)
fstat(r11, 0x0) (async)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r11, 0xc0406618, &(0x7f0000000300)={@desc={0x1, 0x0, @auto="547cd96c7f43f3f6"}}) (async)
read$FUSE(r8, &(0x7f0000000e00)={0x2020}, 0x2020) (async)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000dc0)={[], 0xf000}, 0x1000)
close(r2)

program did not crash
single: failed to extract reproducer
bisect: bisecting 24 programs with base timeout 30s
testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 14, 30, 7, 22, 30, 2, 12, 7, 30, 29, 10, 20, 25, 11, 14, 30, 14, 3, 30, 14, 30, 8, 26]
detailed listing:
executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240), 0x3)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304, 0x36}, "00001f880000dbaa", "a504eb69a751e9d7e9fb434d1665e900000000ffffff7f00", '\x00\t\x00', "a3df08cf1f5ef48d"}, 0x38)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="f9f9ce1089bfa146f634eca9603b2fa3a2cd8d4981cacf3c167389b9ae845e59030adc342efca0580d429546b60dd1f2f1e39943bcdf13deed882485d0e6c680e6", 0x41}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x10000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='27', 0x2)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, 0x0, 0x8)
msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1000)
mount(0x0, &(0x7f0000000180)='.\x00', &(0x7f00000001c0)='devpts\x00', 0x22008d0, 0x0)
executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0)
socket$kcm(0x10, 0x3, 0x0)
r0 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f0000000240)}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
syz_genetlink_get_family_id$smc(&(0x7f0000000580), 0xffffffffffffffff)
userfaultfd(0x80801)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010300ff000040720501cb6526010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000800)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="000304a5d5d8e3b0304304030408"], 0x0, 0x0}, 0x0)
syz_usb_control_io$uac3(r2, &(0x7f0000000900)={0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="0030b1000000b1118710feff31537c1d95117eede39a457b82c5aa10160c92a2bc738c6a64f96a6578662e342b733fc976ff446e735bbeba96c1df8255a0425162f2685b6de6df9bd5dd271909c1e5e28a4f01eb1156f00255de23b2d3f58effc7fef10274e85a8422e1a3e32d1ef7603a68617649101d8d1320ad377f2a0fb8cc652a934e8cdac766825b0e785da9474d07d5abea9dcdf0ba5220f347b39a5c930e26235e5c1369bedc12276c49be1ec5c3c8e93fc125"], &(0x7f0000000f00)=ANY=[@ANYBLOB="63bf096ee2a5ae208ea0e6d532da685f37104bc5d18332edce29ff17957a22b427ef122510030e73f3231df08ca19503efed560d79305e63b42e31bff35100f0ffff60d739b86f2a5288fdb8e397f10ec25fca08ce3cc9ed1a75c94a022258f084c689f7bf59b7e83b1f00cbe67ae81b3ec900e57153507b44c0d63ce020b492f5ff1e7de5785285bba578af02c98170e82f6671e144254a35d29bea2b6c7f4ee9e46b172fca09aa85c780ed54b0aa1ed73fe46e74fd5ac635fe8da864d56ae30def5002289a769e5f1e6a61fc30a80207c4f99f889d98712c3db4270371135d6718ad5d00000000000000000000000000000051831770e2efffb4936753f3bb2af9e2c566fdbcd6b5bbb6779309a71c7ae0a2c01512ad0b37dcd14c4d5850ccea4c6e6002a7b9a1ef1e15499f7bbab074463e0ab7e700025a7d7db820f44dc3b45ea4c70205afd2264b25bdd63e3a00dcc2b68586be990e2b5cd2793d78c47bec423d8e6824af9b0064937a17697355d00972c2a6fd1efae96ab33cb732523dec9a226c105a0a6a4a7ab84e6816647b678dc9a01d1410095e287dd5bf8078172086a5ff00afc09a073a3f881c9be6b41c84f30831a39f0b6bd56025038a91089be2e340"]}, &(0x7f0000000a40)={0x44, &(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x80}, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20810100000055bc6ea6f558cd915906b8"], &(0x7f0000000240)={0x20, 0x82, 0x1, 'm'}, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000bc0)={0x20, 0x84, 0x1, '\x00'}, &(0x7f0000000c00)={0x20, 0x85, 0x3, "794ec0"}})
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000c40)={0xc, 0x0, &(0x7f0000000c80)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r0, &(0x7f0000000000)="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", 0x1000, 0x20040040, 0x0, 0x0)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001340)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001300)={&(0x7f00000010c0)={0x22c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x15}}}}, [@NL80211_ATTR_TX_RATES={0x15c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffb9, 0x6, 0x7ff, 0xfff8, 0xe944, 0x7, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1000, 0x4e, 0x6, 0x7, 0xf, 0x0, 0xaf2f]}}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x0, 0x48, 0x1, 0x6c, 0x6, 0x5, 0x36, 0xb, 0xb, 0x30, 0x36, 0x1b, 0x46, 0x36, 0x1b, 0x4, 0x6c]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x6}, {0x4, 0x2}, {0x2, 0x6}, {0x5, 0x6}, {0x7, 0x1}, {0x1, 0x4}, {0x3, 0x5}, {0x2, 0x8}, {0x1, 0x5}, {0x5, 0x5}, {0x7, 0x6}, {0x5, 0x5}, {0x4, 0x6}, {0x5, 0x1}, {0x7, 0x6}, {0x4, 0x9}, {0x7, 0x1}, {0x2, 0x4}, {0x0, 0x9}, {0x1, 0x1}, {0x3, 0x6}, {0x4, 0x2}, {0x1, 0x3}, {0x2, 0x6}, {0x5, 0x9}, {0x7, 0x2}, {0x6, 0x1}, {0x4, 0x3}, {0x5, 0x2}, {0x6, 0x1}, {0x5, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x6}, {0x2, 0x8}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0xa}, {0x6}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x9}, {0x3, 0x6}, {0x1}, {0x1, 0xa}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x4}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6, 0x18, 0x1b, 0x2, 0x60, 0x1b, 0x48, 0x6c, 0x1, 0x48, 0x18, 0x5, 0x30]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xa73e, 0xb805, 0x7fff, 0x0, 0xf, 0x7c6, 0x9]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x4, 0x16, 0x48, 0x30, 0x36, 0xb, 0x30, 0x3, 0x16, 0x18, 0xc6a818b6b0322e15, 0xc, 0xb, 0x16, 0x18, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfa0, 0x9, 0x4000, 0x26, 0x8, 0x6, 0x40, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0xa8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0xd, 0x1, 0x0, 0x5, 0xfff7, 0x8001, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x61, 0xd54, 0x3, 0x94c, 0xcf, 0x6, 0x101, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x7}, {0x2, 0x6}, {0x1, 0x2}, {0x6, 0x5}, {0x0, 0x6}, {0x1, 0x3}, {0x0, 0x7}, {0x6, 0xa}, {0x2, 0xa}, {0x5, 0x4}, {0x2, 0x5}, {0x5, 0x7}, {0x2, 0x9}, {0x1, 0x3}, {0x2, 0x1}, {0x1}, {0x4, 0x3}, {0x7, 0xa}, {0x0, 0x4}, {0x2}, {0x4, 0x4}, {0x4, 0x7}, {0x1, 0x5}, {0x0, 0x9}, {0x7, 0x5}, {0x3, 0xa}, {0x0, 0x5}, {0x0, 0x7}, {0x0, 0x9}, {0x1, 0x9}, {0x6, 0x1}, {0x7, 0x5}, {0x4, 0x1}, {0x3, 0x7}, {0x0, 0x5}, {0x2}, {0x1, 0x3}, {0x2, 0x1}, {0x1, 0x5}, {0x4, 0x1}, {0x2, 0x8}, {0x5}, {0x5}, {0x4, 0x1}, {0x2, 0x6}, {0x1, 0x3}, {0x3, 0x9}, {0x5}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x5, 0x6c, 0x6, 0x1, 0x60, 0x1, 0x4, 0x1b, 0x18, 0x24, 0x36, 0x18, 0x60]}]}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x4044000}, 0x40800)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000001380)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r1)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x58}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}]}, 0x34}, 0x1, 0x0, 0x0, 0x24048044}, 0x4004090)
mount(&(0x7f0000001500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001540)='./file0/file0\x00', &(0x7f0000001580)='xfs\x00', 0x2000800, &(0x7f00000015c0)='nl80211\x00')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x58, r4, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x30, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "25b7606cf0d0"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xe}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xa}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}]}, 0x58}}, 0x4000010)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, r4, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4010)
syz_emit_vhci(&(0x7f0000001840)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x5f}, @l2cap_cid_signaling={{0x5b}, [@l2cap_disconn_req={{0x6, 0xb, 0x4}, {0x20d, 0x84c}}, @l2cap_conf_rsp={{0x5, 0x4a, 0x41}, {0x2, 0xffff, 0x6, [@l2cap_conf_rfc={0x4, 0x9, {0x2, 0x3, 0x4, 0x0, 0x1, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x7}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_efs={0x6, 0x10, {0xc0, 0x0, 0x9, 0x1, 0x6, 0x2}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x9, 0x1, 0xe5ae, 0x7, 0x7}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x5c, 0x80, 0x10, 0x1}}]}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0xfff9, 0x9}}, @l2cap_info_req={{0xa, 0x7, 0x2}, {0x3}}]}}, 0x64)
getsockname$packet(r3, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001900)=0x14)
sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x54810000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x40, r4, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x67}, @void, @val={0xc, 0x99, {0x2, 0x4}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfffffffe}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8001}]}, 0x40}, 0x1, 0x0, 0x0, 0x60}, 0x40)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001a80), r5)
sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, r6, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x40)
symlink(&(0x7f0000001b80)='./file0/file0\x00', &(0x7f0000001bc0)='./file0\x00')
sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x2c, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffff654, 0x59}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000004)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001d00)={{<r7=>0x0, 0xa1a, 0x3, 0x6, 0x401, 0x3, 0x6, 0x4, 0x6, 0x7, 0x4, 0x8000, 0x10000, 0xa, 0x3}})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000002d00)={0x0, ""/256, 0x0, <r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000002f00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r9=>0x0}], 0xfb, "3f892fa34937cb"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000003f00)={{<r10=>0x0, 0xceb8, 0x1, 0x8, 0x4, 0x1, 0x9, 0x40, 0x2, 0x1000, 0x3, 0x8, 0x2, 0x101, 0x80000000}, 0x8, [0x0]})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000003f80)={<r11=>0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000004f80)={0x0, ""/256, <r12=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000005180)={<r13=>0x0, 0x0, "ca75d5442dad20ac71e73fa52fbe07b454b73d6b449ead614371888bba5d1482fbf2097767b0f9288a398473306775312f2e94a627bb663c5e873e26642c4b8c65cf20ba98e6d6c1b639c8aedd962aa18e93588cf2571074eb47800b33ab0b4b1d871d840837b5b051d44d0fd3762689eb45246202b89189b53395b561d427a3f14c1374ec74c0d624d8d1f84c0b7c91a05e85dc9e1465deed84dd36a3837efe8f130d4f21701b5a0527674a872f7a154b92cbe4b0f64cf2ca1dddf1ac09782bb73320552ae4b22acfbcabdb4ebbf42486ebc25407dd5d5b2d4df77f506d52fab39dfbd349e9ff9c591e75fa7a1c78090d756efabd531a51bf67a4035b0f76bd", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000006180)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r14=>0x0}], 0x8, "affbd0a0c5f3ff"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000007180)={<r15=>0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000008180)={{<r16=>0x0, 0x4, 0xffffffffffffb208, 0xec7, 0x9f, 0x90000000, 0xfffffffffffffaab, 0x4, 0xe3, 0x7, 0x7, 0x1, 0x6, 0x0, 0x5}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000108b00)={0x5, [{r7, r8}, {0x0, r9}, {r10, r11}, {r12, r13}, {r14, r15}, {r16}], 0x7, "cdc6e10fd9eef7"})
executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0)
ioctl$SOUND_PCM_READ_RATE(r2, 0x80045002, &(0x7f0000000400))
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc25c}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newsa={0x1b8, 0x10, 0x1, 0xfffffffd, 0x0, {{@in6=@remote, @in=@remote, 0x4e21, 0x7, 0xfffe, 0x1, 0x2}, {@in=@multicast1, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x64}, {0x0, 0x0, 0x0, 0x80000001}, {0xfffffffc, 0x0, 0x20000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bf27}}, @algo_auth_trunc={0x64, 0x14, {{'cmac(aes)\x00'}, 0xc0, 0x0, "73778b345453a206609ccfde2716f5d32243bbc961278195"}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='udf\x00', 0x20001b, 0x0)
executing program 1:
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000a40), 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='$\x00'}]}, 0x1c}}, 0x0) (async)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000a80)={0x1000, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=r1, @dev}, 0x45)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fcntl$setstatus(r4, 0x4, 0x2800) (async, rerun: 64)
r5 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x800, 0x3, 0x0, 0x800, 0x1}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0xe8) (async)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) (async, rerun: 64)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) (async)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000b00)={0x6, 0x1, 0x0, 0x20000000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x44}, @multicast2}, 0x10) (async, rerun: 64)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x2, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000040b7030000000000008500000006000000870000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0xd2, &(0x7f0000000200)=""/210}, 0x90) (async, rerun: 64)
setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000b40)=0xa, 0x4)
executing program 0:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x408482, 0x0)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x2) (async)
sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000080)={0xa, 0x4e24, 0x4, @mcast1, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="dec3ddfdf8471875f49497d4b3427cd6a10010d5f5f16d83c112a80fa788a072d35a9ee2e62943c2ad24969345afe36d26c0bd", 0x33}], 0x1, &(0x7f0000000140)=[@rthdrdstopts={{0xe8, 0x29, 0x37, {0x6, 0x19, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @pad1, @pad1, @generic={0x2, 0x47, "c294c134ffff3fa22bb8a2317fb788dd510c460964974fcd8b9e41c36f36c5ec1c5f319a9ca0431c4df910f2973d75ab9b72b166d7eb1498f921ba1b1200775b5fec26db5bc90a"}, @generic={0x0, 0x4f, "624f62ba4d62cf10ff9b25a944b1b9eeb487e864b89785afdaf2d064c78532ac88755ca77a5744277e5463dc949c043f17d5501f678a52615402cce503e7706657cf09f2c0af2eeb92c978e4180ede"}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}], 0x100}, 0x2000001) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x393200, 0x3)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f00000002c0)=0x5a, 0x4) (async)
recvmsg$inet_nvme(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/61, 0x3d}, {&(0x7f0000000340)=""/79, 0x4f}], 0x2, &(0x7f0000000400)=""/198, 0xc6}, 0x0) (async, rerun: 64)
r1 = openat$nsim_port_qreset(0xffffffffffffff9c, &(0x7f0000000540)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x31}, 0x1, 0x0) (async, rerun: 64)
setxattr$trusted_overlay_redirect(&(0x7f0000000580)='./file0/file0\x00', &(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x8, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000640)='netdevsim0\x00', 0x10) (async)
mkdir(&(0x7f0000000680)='./file1\x00', 0x34) (async, rerun: 32)
ioctl$sock_ifreq(r0, 0x8916, &(0x7f0000000700)={'ip_vti0\x00', @ifru_settings={0x7, 0xfffffff5, @fr_pvc=&(0x7f00000006c0)={0x4}}}) (async, rerun: 32)
syz_emit_ethernet(0x30, &(0x7f0000000740)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @val={@void, {0x8100, 0x7, 0x1, 0x4}}, {@arp={0x806, @generic={0x8, 0x8848, 0x6, 0x6, 0x2, @local, "068a8a37c71e", @random="192d00a9d474", "5f2f8584"}}}}, &(0x7f0000000780)={0x1, 0x2, [0xeca, 0x99b, 0xc97, 0xb09]}) (async, rerun: 32)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'macvtap0\x00', 0x10}) (async, rerun: 32)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000800)={0x87, 0x29, 0x2, {0xfff, [{{0x2, 0x2, 0x8}, 0x7, 0x2, 0x7, './file1'}, {{0x4, 0x4, 0x8}, 0x8, 0x5, 0x7, './file0'}, {{0x1, 0x1, 0x4}, 0x0, 0xff, 0x7, './file1'}, {{0x2, 0x1, 0x8}, 0x3, 0x6, 0x7, './file1'}]}}, 0x87)
mkdirat(r0, &(0x7f00000008c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000900)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RREADLINK(r2, &(0x7f0000000940)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10)
readlink(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)=""/108, 0x6c) (async)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000a40)={0x1, 0xfd, 0x7, 0xbf9, 0x5, "721668591d877a3c3e52b8eb57237bdc855a84", 0x9e4, 0x4})
syz_emit_ethernet(0xc9, &(0x7f0000000a80)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x4, 0x0, 0x3}, {0x8100, 0x4, 0x0, 0x1}}, {@mpls_uc={0x8847, {[{0x81, 0x0, 0x1}, {0x1}, {0x9}, {0x5, 0x0, 0x1}, {0xef7d, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x69, 0x0, 0x1}, {0x7ff}, {0x9, 0x0, 0x1}], @llc={@llc={0x1, 0xf4, "b0ee", "d41a06ec0b156cf85553bdfac8db34b312f0f3e751db230a30c30d9cf59cbe0d7a1e93ce4df9d10d39faa3b465377456bb665a2076dba40f5b182ee6ec2932aae86a3f2d84fa56190f3f45dc43221f41e3b3e4299e52330f5be482c5a09468d8aad9784f4d3612e2cc9d32c1c09b0c9f0b8c7a525db79eae2410485acd6cae9178769ab15fb83cca42781c"}}}}}}, &(0x7f0000000b80)={0x0, 0x3, [0x554, 0x1e3, 0xb5e, 0x742]}) (async, rerun: 64)
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000bc0)={0x10000, {{0x2, 0x4e24, @remote}}}, 0x88) (rerun: 64)
ioctl$PPPIOCUNBRIDGECHAN(r1, 0x7434)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x14)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000c80)=0xe) (async, rerun: 64)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000cc0)) (async, rerun: 64)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$XFS_IOC_FSGROWFSRT(r1, 0x40105870, &(0x7f0000000d00)={0xfffffffffffff001, 0x3})
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000d40)=0x1) (async, rerun: 64)
recvmmsg(r3, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000d80)=""/42, 0x2a}, {&(0x7f0000000dc0)=""/252, 0xfc}, {&(0x7f0000000ec0)=""/28, 0x1c}, {&(0x7f0000000f00)=""/231, 0xe7}], 0x4, &(0x7f0000001040)=""/15, 0xf}}], 0x1, 0x10001, &(0x7f00000010c0)) (async, rerun: 64)
io_uring_enter(r0, 0x6611, 0x95c8, 0xdc, &(0x7f0000001100)={[0x5]}, 0x8)
executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000000)={0x67, 0x1, 0x1fe7, 0x1000, &(0x7f0000fff000/0x1000)=nil})
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x2)
write(r0, &(0x7f0000000140)='27', 0x2)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x20000008)
msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4)
sendmmsg$inet(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="b3", 0x1}], 0x1, &(0x7f0000000300)=ANY=[], 0xf0}}], 0x1, 0x24004c41)
mount(0x0, &(0x7f0000000180)='.\x00', &(0x7f00000001c0)='devpts\x00', 0x22008d0, 0x0)
executing program 1:
r0 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000003c0)={'/sys/block/md', @num=0x0, '/md/', @array='chunk_size\x00'}, 0x2, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1000)
chown(&(0x7f00000000c0)='./file0\x00', r1, 0xee01)
quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, r1, &(0x7f0000000100))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e21, 0x26, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x2a, 0x0, "b25dd300350731437df94f0a338977934d6951cdd6c61e31687172d956b141e3f4e87e6ab615ea379a12c5a6f5c6e7b3ab38f5f3570909f89f3e47ec97b12cc30a1c48cd0300fd5dfad4624800"}, 0xd8)
write$md_sysfs(r0, &(0x7f0000000240)=@str='512', 0x3)
executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newpolicy={0xb8, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0xffff, 0x0, 0x0, 0xa, 0x80, 0x80, 0x11}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x59) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
bind$netlink(r2, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async)
getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x40d, 0x70bd29, 0x1ffffffc, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) (async)
clock_gettime(0x0, &(0x7f0000000540)={<r4=>0x0, <r5=>0x0})
pselect6(0x40, &(0x7f0000000580)={0x9, 0x0, 0x4bc, 0x0, 0x7, 0xd3cf, 0x1, 0x7}, &(0x7f00000005c0)={0x7, 0x5, 0x401, 0xfff, 0xfffffffffffffff9, 0xffffffffffffffff, 0xff, 0x3ff}, &(0x7f0000000600)={0x8001, 0x400, 0x8, 0x8ae7, 0x100000001, 0x5, 0xffffffff80000001, 0x8}, &(0x7f0000000640)={r4, r5+10000000}, &(0x7f0000000680)={&(0x7f00000006c0)={[0x4]}, 0x8}) (async, rerun: 32)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000700), 0x3) (rerun: 32)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000740)=@gcm_128={{0x303}, "dce02de9d7bd466b", "72e64b3892060025848c9f40363cf916", "00040400", "e2b768b4bb9e0d9b"}, 0x28) (async, rerun: 32)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x5, 0x0, 0x0) (async, rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x24, 0x0, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044041}, 0x24008000) (async, rerun: 64)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x14}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4048040}, 0x0) (async, rerun: 64)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000780)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async)
listen(r8, 0x0) (async)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r9, &(0x7f00000007c0)={0x2, 0x4e22, @empty}, 0x10) (async)
r10 = accept(r8, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4000804}, 0x40010)
recvfrom(r9, &(0x7f00000008c0)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
executing program 1:
syz_emit_ethernet(0x56, &(0x7f0000000b80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x1c, 0x3a, 0x0, @private1, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x8, 0x45f8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0xb, 0xf5}}}}}}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = creat(&(0x7f0000000c00)='./file0\x00', 0x0)
writev(r0, &(0x7f0000000c40)=[{&(0x7f0000000cc0)="a1", 0x1}, {&(0x7f0000000d80)="934359e60cc49e3a906778f31a94a72050a1b0a97d59d7ae88f0ad7becc4f38a50117a626cc45d71e07a1cec1e55c84ce4ace7dce1488d2f28f64db58087c0edddb08b0eb22c4f81477db60e54b925d7fba51dca9505085f75d67479e5afbbbe9e480d00639b9cbc75c9f6e8edceebcdce7a688210b79eb2659d2e7cd87483316b39ab2fc5df7058f3876404472955c58054ee38832b9bab024b93f8efc47355bf26c51def6fabad1f0ac0862a39d008d889b70786f890f489691ae1b09e989163", 0xc1}, {&(0x7f0000000e80)="57f2b653327f275752a2f0114a0b49177d4c9029cb9eab9f75bb0db3484e07c4434793c85e1f9e57bed83ca389fa619bef692a2c826d9d8dcc234fc43d857a74308feb9c489bba3ac7df6c513762f93641d3665587f619cfbfcb88192f1f0bb3a165477a95834ebab73ea342ee3aba462b0d9cbd566ff6c9f28435773e32d6499c3e8b8d820f8b878dd5221b6958b319bd131daa051f3faddd529686a4b140645ab51a30fcfa6a5be92cd09c298c2d5a8231b03bdc00349826f885029fa44c2bcaeb53333bc8370175c8eb593e60c492750b426644c198add3dc710b8ff7cc735bdc00", 0xe3}, {&(0x7f0000000f80)="d2d09cf1015a4c5fedd4e07a35daeb31546d7fd183626ed6cc87b628eefdde3f477b5c6831f00bd3d9fe07fd2a46a9b707641c6032a5f8e68980e6ad75e54d3dab9c22000000000000", 0x49}, {&(0x7f0000001000)="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", 0x1000}, {&(0x7f0000002000)="280c0fc52f664ef7127ec8f124567aeeb04a8782dbfb45dcd6e81cba8c4e199b53efb2841a696193e612c822e08d534569fce0a80daa0a4a90c7f82894ff51949b610f9077ef35a80b8bb4c46fc4c5d92168df57fe6fec2664482ff34a8f9ca95a799b167c91280738d1eb", 0xfed0}], 0x6)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000000)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt\x00', 0x1ff)
r2 = syz_open_dev$vim2m(&(0x7f00000004c0), 0x3e, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000500)={0x1, @pix_mp={0x0, 0x3, 0x3234564e, 0x2, 0x7, [{0x8, 0x2}, {0x8, 0x1ff}, {0x5, 0x70ade1c0}, {0xbb, 0x7}, {0xfffffff7, 0x7}, {0x5, 0xd}, {0x1, 0x6}, {0x4, 0x3}], 0x0, 0xa4, 0x6, 0x2, 0x5}})
mount(&(0x7f0000000280)=@filename='./dev/sda1\x00', &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000300)='ext4\x00', 0x8410, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt\x00', 0x0, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000380)=0x1)
r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x822b01)
ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000080)={0x1, 0x0, 0x0})
write$char_usb(r4, &(0x7f00000000c0)="e2", 0xff0f)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r5 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0)
mount(&(0x7f0000000400)=@filename='mtd0/file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='jffs2\x00', 0x800000, 0x0)
ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000000d40)={0x0, 0x1400})
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000b00)={0x10, 0x30, 0xfa00, {&(0x7f0000000ac0)={<r7=>0xffffffffffffffff}, 0x0, {0xa, 0x4e23, 0x1, @local, 0x10}}}, 0x38)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000b40)={0x11, 0x10, 0xfa00, {&(0x7f0000000a80), r7}}, 0x18)
executing program 2:
ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000005c0)={0x0, 0x101, 0x31d})
r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000580), 0x68d42, 0x0)
ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x800, 0x0, 0x0, {<r2=>0x0, {'syz', 0x0, '3\x00'}}})
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f00000004c0)={0x8, 0x0, '\x00', {0x0, @bt={0x8, 0x1, 0x1, 0x2, 0x2, 0x9, 0x2, 0x0, 0x8, 0x8, 0xa9e6, 0x5, 0x7, 0x7, 0xa, 0x4, {0x4}, 0x8, 0x5}}})
ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x2a010, 0x0, 0x0, @by_dev={r2}, [@writecache={0x0, 0x1080, 0x0, 0x58, 'writecache\x00', {0x73, 0x20, @ram={'/dev/ram', 0x1}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '1024', 0x20, '2 low_watermark 10'}}]})
ioctl$DM_DEV_REMOVE(r1, 0xc138fd04, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x5000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '3\x00'}}})
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
executing program 1:
r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3)
r1 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000003c0)={'/sys/block/md', @num=0x0, '/md/', @array='chunk_size\x00'}, 0x2, 0x0)
write$md_sysfs(r1, &(0x7f0000000240)=@str='512', 0x3)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req={0x5, 0x1, 0xc0000, 0x800}, 0x10)
unshare(0x46000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0)
openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0)
write$md_new_array(0xffffffffffffffff, &(0x7f0000000440)={'md', @named={'_syz', 0x0, '0'}}, 0x8)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/set_event\x00', 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
preadv(r3, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/205, 0xcd}], 0x1, 0x5c, 0x25c)
mmap(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x11, r2, 0x0)
prctl$PR_SET_IO_FLUSHER(0x41, 0x3)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x20000, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000500)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]})
write$md_sysfs(r1, &(0x7f0000000400)=@str='1', 0x1)
executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000040), 0x4)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f00000000c0)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00')
pread64(r4, &(0x7f0000000180)=""/253, 0xfd, 0x1)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000300), 0xffb2)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000340)=@ccm_128={{0x304}, "e3d9162be1b07411", "726c84d47b8e1c777b43316b24f98517", "6284695f", "296d4442c1ff8da4"}, 0x28)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x4, &(0x7f0000000380)=@gcm_256={{0x303}, "24747942338921a1", "d830ce0a000000000000a7173985202bbfb61b36f3678de8ea2d0d6616076243", "559edb33", "7c5cec21291a43fe"}, 0x38)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x5, &(0x7f0000000000)=0x100000001, 0x4)
ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f00000007c0))
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000840)={0x2, 0x0, [{0x400000b0, 0x0, 0x3}, {0x400000b1, 0x0, 0x7f}]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000880)={0x1, 0x0, [{0x40000084, 0x0, 0x39}]})
executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x800000, 0x0, 0x8, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x7, 0x0, 0xfffffffc, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x101, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x8000, 0x20, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x3de8, 0x4, 0x5, 0x5, 0x0, 0x7fff, 0x75ba, 0x80000001, 0x5, 0xffffffff, 0x803, 0x2, 0x5, 0x2, 0x0, 0x1000, 0x4, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000011, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0xb, 0x1, 0x2f2, 0x3, 0x0, 0x81, 0x5, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0xfff, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xfffffeff, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x232, 0x5, 0x2, 0x9, 0x3, 0xcdd, 0x2, 0xd6b, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x3, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xff, 0x7, 0x1, 0x82, 0x530, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x4, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x3, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0xff, 0x10000, 0x7ffd, 0x5, 0x5, 0x0, 0x8, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x5, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x400002, 0x0, 0x1, 0x1, 0x3, 0xfff, 0x7, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x9, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x2009, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x7, 0xe, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x7e54, 0xa, 0x2, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0x7, 0x7, 0x2, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x2, 0x800005, 0x2, 0xb0, {0xb, 0x2, 0x2d88, 0x8, 0xffff, 0x10000}, {0xc, 0x0, 0x6, 0x6, 0x1, 0x1}, 0x6, 0xa0000, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host16=0xc00, 0xffffffffffff7ff4, 0x3, 0x8ca}}], 0x38})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000280)={0x8f, 0x0, 0x2})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x10, 0x17, 0x0, 0x2d92119, 0xfc, 0x2, 0x4, 0xff, 0x0, 0x6, 0x1, 0x0, 0x7, 0x7, 0x4, 0x7, 0x6, 0xfa, '\x00', 0x3, 0x1ff})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000180))
executing program 3:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0)
socket$kcm(0x10, 0x3, 0x0)
r0 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f0000000240)}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
syz_genetlink_get_family_id$smc(&(0x7f0000000580), 0xffffffffffffffff)
userfaultfd(0x80801)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010300ff000040720501cb6526010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000800)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="000304a5d5d8e3b0304304030408"], 0x0, 0x0}, 0x0)
syz_usb_control_io$uac3(r2, &(0x7f0000000900)={0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="0030b1000000b1118710feff31537c1d95117eede39a457b82c5aa10160c92a2bc738c6a64f96a6578662e342b733fc976ff446e735bbeba96c1df8255a0425162f2685b6de6df9bd5dd271909c1e5e28a4f01eb1156f00255de23b2d3f58effc7fef10274e85a8422e1a3e32d1ef7603a68617649101d8d1320ad377f2a0fb8cc652a934e8cdac766825b0e785da9474d07d5abea9dcdf0ba5220f347b39a5c930e26235e5c1369bedc12276c49be1ec5c3c8e93fc125"], &(0x7f0000000f00)=ANY=[@ANYBLOB="63bf096ee2a5ae208ea0e6d532da685f37104bc5d18332edce29ff17957a22b427ef122510030e73f3231df08ca19503efed560d79305e63b42e31bff35100f0ffff60d739b86f2a5288fdb8e397f10ec25fca08ce3cc9ed1a75c94a022258f084c689f7bf59b7e83b1f00cbe67ae81b3ec900e57153507b44c0d63ce020b492f5ff1e7de5785285bba578af02c98170e82f6671e144254a35d29bea2b6c7f4ee9e46b172fca09aa85c780ed54b0aa1ed73fe46e74fd5ac635fe8da864d56ae30def5002289a769e5f1e6a61fc30a80207c4f99f889d98712c3db4270371135d6718ad5d00000000000000000000000000000051831770e2efffb4936753f3bb2af9e2c566fdbcd6b5bbb6779309a71c7ae0a2c01512ad0b37dcd14c4d5850ccea4c6e6002a7b9a1ef1e15499f7bbab074463e0ab7e700025a7d7db820f44dc3b45ea4c70205afd2264b25bdd63e3a00dcc2b68586be990e2b5cd2793d78c47bec423d8e6824af9b0064937a17697355d00972c2a6fd1efae96ab33cb732523dec9a226c105a0a6a4a7ab84e6816647b678dc9a01d1410095e287dd5bf8078172086a5ff00afc09a073a3f881c9be6b41c84f30831a39f0b6bd56025038a91089be2e340"]}, &(0x7f0000000a40)={0x44, &(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x80}, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20810100000055bc6ea6f558cd915906b8"], &(0x7f0000000240)={0x20, 0x82, 0x1, 'm'}, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000bc0)={0x20, 0x84, 0x1, '\x00'}, &(0x7f0000000c00)={0x20, 0x85, 0x3, "794ec0"}})
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000c40)={0xc, 0x0, &(0x7f0000000c80)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6(0xa, 0x80003, 0xff) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0400000000000000000200000030000a80390001800a00010071756575650000001c0002800600034000040000060001400000000006000240000400000900010073797a300000"], 0x84}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="900000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000700012800b00010067656e6576650000600002800500"], 0x90}}, 0x4048084)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = getpid()
process_vm_readv(r2, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/54, 0x7ffff000}, {&(0x7f0000000540)=""/152, 0x98}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000640)=""/95, 0x7ffff000}], 0x286, 0x0) (async)
pipe2(&(0x7f00000000c0), 0x80000) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
epoll_create1(0x0)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010600000000000000002400000024000000020000000000006d7c2557fc000000000300000000020000000200000000000000000000000000000d00c42abf64dc2ccae155bf4c5295ff173c92e94117c2e33880280ffd4994798f"], 0x0, 0x3e}, 0x20) (async)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/uevent_helper', 0x88002, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x200, @local}, {0x2, 0x4e23, @local}, 0x37f, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) (async)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20004844}, 0x48885) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) (async)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0xa4e96d38234f64e2, 0x7ffffffe) (async)
ioctl$XFS_IOC_SCRUBV_METADATA(r1, 0xc0285840, &(0x7f0000000400)={0x1, 0x4, 0xbd, 0x0, 0x5, 0x8, 0x0, &(0x7f0000000380)=[{0x10, 0x1ff, 0x74}, {0x0, 0x1ff, 0x6}, {0x12, 0xfe, 0x9}, {0x1a, 0xfe, 0x3}, {0x15, 0xfe, 0x1}, {0x0, 0xfe, 0x6}, {0x10, 0x1ff, 0x2}, {0x11, 0x1ff, 0x3}]}) (async)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r4, &(0x7f0000000000), 0xd)
executing program 0:
openat$dm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x12000, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x20000000000, 0x840)
syz_usb_disconnect(r1) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902"], 0x0) (async)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0) (async)
r2 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x1}, 0x8) (async)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000340)=""/142)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/1:0:0:0\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x20, 0x3, &(0x7f00000004c0)=@framed, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000540)={0xc5, 0xc28f, 0x3e2, "ff6e001b382c30bc37ded7a28230b5d4ec034b887cf70958d1afaea07010dbb3c81b8d866e42badba4f940528289a12c40e196e064051b270460b4e0740543ebccc85b0477cede0a0866f8cf927a3f59fa76fd5e0f1c99f1c58cfb109cdd8192cf8f6d66289468b168bd6d46ff809d87922f670fecc5e6e377fbe5020716dae29c1986596dced92465f217b25a78c55dbb17c5548ba80b092ded321c58094b6cab21cc1afa990ddaecc4e424dc30c7e1d0ab7576cf9e037c5deede75424ab96fed00000000"}) (async)
sendto$inet6(r2, &(0x7f00000002c0)="9f", 0x34000, 0x44004, &(0x7f0000000300)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c)
executing program 2:
syz_usb_connect(0x3, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e8901"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = syz_open_dev$I2C(&(0x7f0000000540), 0x2, 0x48842)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000580)={0x1, 0x81, 0x6, &(0x7f00000005c0)={0x1f, "0a4fe80aeaf4c5cb1332f79e983491f3ab25706255ceb7f5ed8a6e6f413e5f4860"}})
executing program 3:
r0 = userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000003, 0x40010, 0xffffffffffffffff, 0x21107000)
ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000040))
socket$kcm(0x2, 0x5, 0x106)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x48})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1b7)
mount(0x0, &(0x7f0000000100)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/events/irq/irq_handler_entry/filter\x00', 0x2, 0x0)
read$FUSE(r1, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
munmap(&(0x7f0000729000/0x4000)=nil, 0x4000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e22, 0xa, @loopback, 0x800002}, 0x1c)
connect$inet6(r5, &(0x7f0000000400)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3801000010000500010000000000000000000000000000000000000000000001000000000000000000000000000000014e200000000001000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x80, @ANYBLOB="00000000000000000000000000000001000012343300000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000100000000000000048000100686d616328736861312900"/240], 0x138}}, 0x0)
executing program 3:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000002440)=0x10, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002480)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002500)={r1, &(0x7f0000002540), &(0x7f0000002580)=@udp=r0, 0x2}, 0x20)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={'\x00', 0x0, 0x0, {0x80, 0xffffffff}, {0x6, 0x681}, 0xab4, [0x7f9, 0x800007b, 0x3, 0xffffffffffffff80, 0xffffffff80000000, 0x66, 0x1000, 0x5f, 0x4, 0xffffffff, 0x40010, 0x80000000011, 0x0, 0xada, 0x0, 0xe3]})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fda000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000d8a000/0x1000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff}, './file0\x00'})
read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r2, &(0x7f0000002400)={0x10, 0x24, r3}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x7, &(0x7f0000000200)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x3, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
mount$afs(0x0, &(0x7f000009df40)='.\x00', &(0x7f000009df80), 0x14000, &(0x7f0000000000)={[{@dyn}, {@flock_write}]})
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) (async)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x4, 0x0, 0x2, {0xa, 0x4e21, 0x80000001, @local, 0xffffffc0}}}, 0x3a) (async)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x18002, 0xdb)
ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r0, 0xc0106450, &(0x7f00000000c0)={<r3=>0x0, 0x0, 0x2})
ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r2, 0xc0106450, &(0x7f0000000100)={<r4=>r3, 0x1}) (async)
ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000140)=""/58) (async)
r5 = fspick(r2, &(0x7f0000000180)='./file0\x00', 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r6=>0x0}) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000003c0)={0x0, 0x0, {}, {0x0, @usage, <r7=>0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000007c0)={{r5}, r6, 0x18, @unused=[0x1, 0x7, 0x8, 0x400], @devid=r7}) (async)
ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r2, 0xc0106441, &(0x7f00000017c0)={0x0, <r8=>0x0, 0x401})
ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r2, 0xc0186445, &(0x7f0000001800)={0x1a1, 0x3, r8, <r9=>0x0}) (async)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001840), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000018c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001880), 0x2, 0x6}}, 0x20) (async)
fcntl$setflags(r0, 0x2, 0x0)
ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000001900)=""/66) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001d80)={r2, 0xe0, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001a80)=[0x0], ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4e, &(0x7f0000001b40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000001bc0), &(0x7f0000001c00), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000001c40)}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002100)={r1, 0xe0, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001e40)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f0000001e80)=[0x0, 0x0], &(0x7f0000001ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r12=>0x0, 0xce, &(0x7f0000001f00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001f40), &(0x7f0000001f80), 0x8, 0x2d, 0x8, 0x8, &(0x7f0000001fc0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x1a, 0xa, &(0x7f0000001980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x0, 0x1, 0x1, 0x4, 0xe}, @ldst={0x2, 0x2, 0x3, 0x1, 0x6, 0x8, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit]}, &(0x7f0000001a00)='syzkaller\x00', 0x4, 0x3a, &(0x7f0000001a40)=""/58, 0x40f00, 0x4, '\x00', r11, @tracing=0x1c, r2, 0x8, &(0x7f0000001dc0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000001e00)={0x3, 0x1, 0x7}, 0x10, r12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000002200)={<r13=>0x0, 0x1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r10, 0xc01864c2, &(0x7f0000002240)={<r14=>0x0, 0x1, r2}) (async, rerun: 32)
ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r2, 0xc0106450, &(0x7f00000022c0)={<r15=>r3, 0x1, 0x2}) (rerun: 32)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01864c2, &(0x7f0000002300)={<r16=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01864c2, &(0x7f0000002340)={<r17=>0x0, 0x0, r2}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000002380)={<r18=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01864c2, &(0x7f00000023c0)={<r19=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PANTHOR_VM_BIND(r2, 0xc0186443, &(0x7f0000002e80)={0x0, 0x0, {0x30, 0x7, &(0x7f0000002d00)=[{0x4, r3, 0x5, 0x6, 0x463e, {0x10, 0x2, &(0x7f0000002280)=[{0x0, r13, 0x3}, {0x80000000, r14, 0x8000000000000000}]}}, {0x4, r15, 0x8, 0x3, 0xa, {0x10, 0x5, &(0x7f0000002400)=[{0x80000000, r16, 0x7}, {0xff, r17, 0xb4}, {0xff, 0x0, 0x3}, {0x1, r18, 0xe9}, {0xff, r19, 0x7}]}}, {0x4, r3, 0x5, 0x6, 0x0, {0x10, 0x9, &(0x7f0000002600)=[{0xff, 0x0, 0x8}, {0x80000000, 0x0, 0x8}, {0x1, 0x0, 0x8}, {0x80000000, 0x0, 0x3}, {0x1, 0x0, 0x798f}, {0x0, 0x0, 0xd1}, {0x0, 0x0, 0xdabf}, {0xff, 0x0, 0x4}, {0x1, 0x0, 0x100000000}]}}, {0x1, r3, 0x80000001, 0x9d73, 0x2b16, {0x10, 0x4, &(0x7f0000002740)=[{0xff}, {0xff, 0x0, 0x7f}, {0x0, 0x0, 0xd}, {0x1, 0x0, 0x2}]}}, {0x10000000, r4, 0x2, 0xec87, 0x1ff, {0x10, 0x4, &(0x7f0000002880)=[{}, {0x80000000, 0x0, 0xff}, {0x0, 0x0, 0x7}, {0xff, 0x0, 0xa}]}}, {0xf0000000, r3, 0xfffffffffffff7d9, 0x0, 0x8000, {0x10, 0x9, &(0x7f0000002b00)=[{0x1, 0x0, 0x565f}, {0x80000000, 0x0, 0x6}, {0xff, 0x0, 0x2}, {0xff, 0x0, 0x1}, {0x80000000, 0x0, 0xa8e6}, {0x1, 0x0, 0xb1}, {}, {0xff, 0x0, 0x10000}, {0x80000000, 0x0, 0xfffffffffffffffe}]}}, {0x0, r9, 0x9, 0x1, 0x6, {0x10, 0x7, &(0x7f0000002c80)=[{0x800000fe, 0x0, 0x5}, {0x1, 0x0, 0xfff}, {0xff, 0x0, 0x559}, {0x0, 0x0, 0x7}, {0x80000000, 0x0, 0x99141bb}, {0x0, 0x0, 0x8001}, {}]}}]}})
executing program 3:
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80800)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000)
r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
executing program 3:
r0 = syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0x7c1f1000) (async, rerun: 64)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x5ebf3503, <r7=>0x0, 0x1}) (rerun: 64)
ioctl$DRM_IOCTL_AGP_UNBIND(r6, 0x40106437, &(0x7f0000000100)={r7, 0x2}) (async)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000f1, 0x0, 0x6}]}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
r9 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x40000) (async)
r10 = getpid()
sched_setaffinity(r10, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r9, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, r10, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r8, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
r11 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0)
fstat(r11, 0x0) (async)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r11, 0xc0406618, &(0x7f0000000300)={@desc={0x1, 0x0, @auto="547cd96c7f43f3f6"}}) (async)
read$FUSE(r8, &(0x7f0000000e00)={0x2020}, 0x2020) (async)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000dc0)={[], 0xf000}, 0x1000)
close(r2)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-close-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-openat$nullb-dup-mmap-ioctl$DRM_IOCTL_AGP_ALLOC-ioctl$DRM_IOCTL_AGP_UNBIND-ioctl$KVM_SET_MSRS-mkdirat-mount-openat-syz_open_dev$sndctrl-getpid-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-openat-fstat-ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY-read$FUSE-execveat$binfmt-close
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0x7c1f1000) (async, rerun: 64)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x5ebf3503, <r7=>0x0, 0x1}) (rerun: 64)
ioctl$DRM_IOCTL_AGP_UNBIND(r6, 0x40106437, &(0x7f0000000100)={r7, 0x2}) (async)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000f1, 0x0, 0x6}]}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
r9 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x40000) (async)
r10 = getpid()
sched_setaffinity(r10, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r9, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, r10, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r8, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
r11 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0)
fstat(r11, 0x0) (async)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r11, 0xc0406618, &(0x7f0000000300)={@desc={0x1, 0x0, @auto="547cd96c7f43f3f6"}}) (async)
read$FUSE(r8, &(0x7f0000000e00)={0x2020}, 0x2020) (async)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000dc0)={[], 0xf000}, 0x1000)
close(r2)

program crashed: UBSAN: shift-out-of-bounds in xa_load
single: successfully extracted reproducer
found reproducer with 26 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-close-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-openat$nullb-dup-mmap-ioctl$DRM_IOCTL_AGP_ALLOC-ioctl$DRM_IOCTL_AGP_UNBIND-ioctl$KVM_SET_MSRS-mkdirat-mount-openat-syz_open_dev$sndctrl-getpid-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-openat-fstat-ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY-read$FUSE-execveat$binfmt
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0x7c1f1000) (async, rerun: 64)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x5ebf3503, <r7=>0x0, 0x1}) (rerun: 64)
ioctl$DRM_IOCTL_AGP_UNBIND(r6, 0x40106437, &(0x7f0000000100)={r7, 0x2}) (async)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000f1, 0x0, 0x6}]}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
r9 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x40000) (async)
r10 = getpid()
sched_setaffinity(r10, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r9, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, r10, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r8, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
r11 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0)
fstat(r11, 0x0) (async)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r11, 0xc0406618, &(0x7f0000000300)={@desc={0x1, 0x0, @auto="547cd96c7f43f3f6"}}) (async)
read$FUSE(r8, &(0x7f0000000e00)={0x2020}, 0x2020) (async)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000dc0)={[], 0xf000}, 0x1000)

program crashed: KASAN: use-after-free Read in tick_nohz_handler
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-close-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-openat$nullb-dup-mmap-ioctl$DRM_IOCTL_AGP_ALLOC-ioctl$DRM_IOCTL_AGP_UNBIND-ioctl$KVM_SET_MSRS-mkdirat-mount-openat-syz_open_dev$sndctrl-getpid-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-openat-fstat-ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY-read$FUSE
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0x7c1f1000) (async, rerun: 64)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x5ebf3503, <r7=>0x0, 0x1}) (rerun: 64)
ioctl$DRM_IOCTL_AGP_UNBIND(r6, 0x40106437, &(0x7f0000000100)={r7, 0x2}) (async)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000f1, 0x0, 0x6}]}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
r9 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x40000) (async)
r10 = getpid()
sched_setaffinity(r10, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r9, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, r10, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r8, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
r11 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0)
fstat(r11, 0x0) (async)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r11, 0xc0406618, &(0x7f0000000300)={@desc={0x1, 0x0, @auto="547cd96c7f43f3f6"}}) (async)
read$FUSE(r8, &(0x7f0000000e00)={0x2020}, 0x2020) (async)

program crashed: BUG: unable to handle kernel paging request in __run_timers
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-close-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-openat$nullb-dup-mmap-ioctl$DRM_IOCTL_AGP_ALLOC-ioctl$DRM_IOCTL_AGP_UNBIND-ioctl$KVM_SET_MSRS-mkdirat-mount-openat-syz_open_dev$sndctrl-getpid-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-openat-fstat-ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0x7c1f1000) (async, rerun: 64)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x5ebf3503, <r7=>0x0, 0x1}) (rerun: 64)
ioctl$DRM_IOCTL_AGP_UNBIND(r6, 0x40106437, &(0x7f0000000100)={r7, 0x2}) (async)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000f1, 0x0, 0x6}]}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
r9 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x40000) (async)
r10 = getpid()
sched_setaffinity(r10, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r9, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, r10, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r8, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
r11 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0)
fstat(r11, 0x0) (async)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r11, 0xc0406618, &(0x7f0000000300)={@desc={0x1, 0x0, @auto="547cd96c7f43f3f6"}}) (async)

program crashed: general protection fault in corrupted
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-close-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-openat$nullb-dup-mmap-ioctl$DRM_IOCTL_AGP_ALLOC-ioctl$DRM_IOCTL_AGP_UNBIND-ioctl$KVM_SET_MSRS-mkdirat-mount-openat-syz_open_dev$sndctrl-getpid-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-openat-fstat
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0x7c1f1000) (async, rerun: 64)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x5ebf3503, <r7=>0x0, 0x1}) (rerun: 64)
ioctl$DRM_IOCTL_AGP_UNBIND(r6, 0x40106437, &(0x7f0000000100)={r7, 0x2}) (async)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000f1, 0x0, 0x6}]}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
r9 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x40000) (async)
r10 = getpid()
sched_setaffinity(r10, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r9, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, r10, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r8, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
r11 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0)
fstat(r11, 0x0) (async)

program crashed: BUG: unable to handle kernel paging request in __run_timers
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-close-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-openat$nullb-dup-mmap-ioctl$DRM_IOCTL_AGP_ALLOC-ioctl$DRM_IOCTL_AGP_UNBIND-ioctl$KVM_SET_MSRS-mkdirat-mount-openat-syz_open_dev$sndctrl-getpid-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-openat
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0x7c1f1000) (async, rerun: 64)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x5ebf3503, <r7=>0x0, 0x1}) (rerun: 64)
ioctl$DRM_IOCTL_AGP_UNBIND(r6, 0x40106437, &(0x7f0000000100)={r7, 0x2}) (async)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000f1, 0x0, 0x6}]}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
r9 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x40000) (async)
r10 = getpid()
sched_setaffinity(r10, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r9, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, r10, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r8, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-close-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-openat$nullb-dup-mmap-ioctl$DRM_IOCTL_AGP_ALLOC-ioctl$DRM_IOCTL_AGP_UNBIND-ioctl$KVM_SET_MSRS-mkdirat-mount-openat-syz_open_dev$sndctrl-getpid-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0x7c1f1000) (async, rerun: 64)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x5ebf3503, <r7=>0x0, 0x1}) (rerun: 64)
ioctl$DRM_IOCTL_AGP_UNBIND(r6, 0x40106437, &(0x7f0000000100)={r7, 0x2}) (async)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000f1, 0x0, 0x6}]}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
r9 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x40000) (async)
r10 = getpid()
sched_setaffinity(r10, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r9, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, r10, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r8, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program crashed: general protection fault in __hrtimer_run_queues
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-close-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-openat$nullb-dup-mmap-ioctl$DRM_IOCTL_AGP_ALLOC-ioctl$DRM_IOCTL_AGP_UNBIND-ioctl$KVM_SET_MSRS-mkdirat-mount-openat-syz_open_dev$sndctrl-getpid-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-fstat
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0x7c1f1000) (async, rerun: 64)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x5ebf3503, <r7=>0x0, 0x1}) (rerun: 64)
ioctl$DRM_IOCTL_AGP_UNBIND(r6, 0x40106437, &(0x7f0000000100)={r7, 0x2}) (async)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000f1, 0x0, 0x6}]}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
r8 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x40000) (async)
r9 = getpid()
sched_setaffinity(r9, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r8, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, r9, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-close-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-openat$nullb-dup-mmap-ioctl$DRM_IOCTL_AGP_ALLOC-ioctl$DRM_IOCTL_AGP_UNBIND-ioctl$KVM_SET_MSRS-mkdirat-mount-openat-syz_open_dev$sndctrl-getpid-sched_setaffinity-write-fstat
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0x7c1f1000) (async, rerun: 64)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x5ebf3503, <r7=>0x0, 0x1}) (rerun: 64)
ioctl$DRM_IOCTL_AGP_UNBIND(r6, 0x40106437, &(0x7f0000000100)={r7, 0x2}) (async)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000f1, 0x0, 0x6}]}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x40000) (async)
r9 = getpid()
sched_setaffinity(r9, 0x0, 0x0)
write(r8, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-close-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-openat$nullb-dup-mmap-ioctl$DRM_IOCTL_AGP_ALLOC-ioctl$DRM_IOCTL_AGP_UNBIND-ioctl$KVM_SET_MSRS-mkdirat-mount-openat-syz_open_dev$sndctrl-getpid-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0x7c1f1000) (async, rerun: 64)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x5ebf3503, <r7=>0x0, 0x1}) (rerun: 64)
ioctl$DRM_IOCTL_AGP_UNBIND(r6, 0x40106437, &(0x7f0000000100)={r7, 0x2}) (async)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000f1, 0x0, 0x6}]}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
r9 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x40000) (async)
r10 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r9, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, r10, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r8, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-close-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-openat$nullb-dup-mmap-ioctl$DRM_IOCTL_AGP_ALLOC-ioctl$DRM_IOCTL_AGP_UNBIND-ioctl$KVM_SET_MSRS-mkdirat-mount-openat-syz_open_dev$sndctrl-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0x7c1f1000) (async, rerun: 64)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x5ebf3503, <r7=>0x0, 0x1}) (rerun: 64)
ioctl$DRM_IOCTL_AGP_UNBIND(r6, 0x40106437, &(0x7f0000000100)={r7, 0x2}) (async)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000f1, 0x0, 0x6}]}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
r9 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x40000) (async)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r9, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, 0x0, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r8, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program crashed: KASAN: use-after-free Read in __hrtimer_run_queues
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-close-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-openat$nullb-dup-mmap-ioctl$DRM_IOCTL_AGP_ALLOC-ioctl$DRM_IOCTL_AGP_UNBIND-ioctl$KVM_SET_MSRS-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0x7c1f1000) (async, rerun: 64)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x5ebf3503, <r7=>0x0, 0x1}) (rerun: 64)
ioctl$DRM_IOCTL_AGP_UNBIND(r6, 0x40106437, &(0x7f0000000100)={r7, 0x2}) (async)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000f1, 0x0, 0x6}]}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, 0x0, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r8, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program crashed: UBSAN: shift-out-of-bounds in corrupted
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-close-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-openat$nullb-dup-mmap-ioctl$DRM_IOCTL_AGP_ALLOC-ioctl$DRM_IOCTL_AGP_UNBIND-ioctl$KVM_SET_MSRS-mkdirat-mount-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0x7c1f1000) (async, rerun: 64)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x5ebf3503, <r7=>0x0, 0x1}) (rerun: 64)
ioctl$DRM_IOCTL_AGP_UNBIND(r6, 0x40106437, &(0x7f0000000100)={r7, 0x2}) (async)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000f1, 0x0, 0x6}]}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, 0x0, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(0xffffffffffffffff, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-close-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-openat$nullb-dup-mmap-ioctl$DRM_IOCTL_AGP_ALLOC-ioctl$DRM_IOCTL_AGP_UNBIND-ioctl$KVM_SET_MSRS-mkdirat-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0x7c1f1000) (async, rerun: 64)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x5ebf3503, <r7=>0x0, 0x1}) (rerun: 64)
ioctl$DRM_IOCTL_AGP_UNBIND(r6, 0x40106437, &(0x7f0000000100)={r7, 0x2}) (async)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000f1, 0x0, 0x6}]}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, 0x0, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r8, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-close-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-openat$nullb-dup-mmap-ioctl$DRM_IOCTL_AGP_ALLOC-ioctl$DRM_IOCTL_AGP_UNBIND-ioctl$KVM_SET_MSRS-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0x7c1f1000) (async, rerun: 64)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x5ebf3503, <r7=>0x0, 0x1}) (rerun: 64)
ioctl$DRM_IOCTL_AGP_UNBIND(r6, 0x40106437, &(0x7f0000000100)={r7, 0x2}) (async)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000f1, 0x0, 0x6}]}) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, 0x0, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r8, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-close-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-openat$nullb-dup-mmap-ioctl$DRM_IOCTL_AGP_ALLOC-ioctl$DRM_IOCTL_AGP_UNBIND-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x7c1f1000) (async, rerun: 64)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x5ebf3503, <r6=>0x0, 0x1}) (rerun: 64)
ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f0000000100)={r6, 0x2}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, 0x0, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r7, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program crashed: BUG: rwlock bad magic in addrconf_dad_work
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-close-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-openat$nullb-dup-mmap-ioctl$DRM_IOCTL_AGP_ALLOC-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x7c1f1000) (async, rerun: 64)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x5ebf3503, 0x0, 0x1}) (rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, 0x0, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r6, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program crashed: BUG: spinlock bad magic in sock_wfree
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-close-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-openat$nullb-dup-mmap-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x7c1f1000) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, 0x0, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r6, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program crashed: BUG: unable to handle kernel NULL pointer dereference in __refill_objects_node
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-close-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-openat$nullb-dup-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
dup(r4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, 0x0, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r5, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program crashed: BUG: spinlock bad magic in sock_wfree
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-close-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-openat$nullb-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, 0x0, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r4, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program crashed: BUG: unable to handle kernel NULL pointer dereference in stack_depot_save_flags
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-close-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, 0x0, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r4, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program crashed: general protection fault in corrupted
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-close-openat$kvm-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe01, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, 0x0, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r3, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program crashed: general protection fault in update_se
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-close-openat$kvm-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, 0x0, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r2, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-close-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, 0x0, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r2, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program crashed: BUG: spinlock bad magic in corrupted
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-openat$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
r0 = syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, 0x0, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r1, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program crashed: BUG: unable to handle kernel paging request in debug_check_no_obj_freed
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, 0x0, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r0, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program crashed: general protection fault in corrupted
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, 0x0, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r0, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, 0x0, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11})
write(r0, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d)
fstat(0xffffffffffffffff, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
syz_create_resource$binfmt(0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, 0x0, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r0, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program crashed: KASAN: use-after-free Read in tick_nohz_handler
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
syz_create_resource$binfmt(0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, 0x0, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r0, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
syz_create_resource$binfmt(0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, 0x0, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r0, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program crashed: general protection fault in corrupted
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
syz_create_resource$binfmt(0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, 0x0, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r0, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
syz_create_resource$binfmt(0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, 0x0, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r0, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
syz_create_resource$binfmt(0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0xa0d2, 0x101, 'syz0\x00', 0x1ec}, 0x6, 0x3, 0x4, 0x0, 0x3, 0x400, 'syz0\x00', &(0x7f0000000380)=['\x00', '-(/-\x00', '+%)\'%/-[&-\x00'], 0x11}) (async, rerun: 64)
write(r0, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
syz_create_resource$binfmt(0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) (async, rerun: 64)
write(r0, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program crashed: BUG: unable to handle kernel paging request in corrupted
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
syz_create_resource$binfmt(0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) (rerun: 64)
write(r0, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program crashed: UBSAN: shift-out-of-bounds in __radix_tree_lookup
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
syz_create_resource$binfmt(0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0)
write(r0, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
syz_create_resource$binfmt(0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) (rerun: 64)
write(r0, 0x0, 0x0) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
syz_create_resource$binfmt(0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) (rerun: 64)
write(r0, &(0x7f0000000240), 0x0) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
syz_create_resource$binfmt(0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) (rerun: 64)
write(r0, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
syz_create_resource$binfmt(0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) (rerun: 64)
write(r0, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async)
fstat(0xffffffffffffffff, 0x0) (async)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
syz_create_resource$binfmt(0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) (rerun: 64)
write(r0, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
program crashed: general protection fault in corrupted
simplifying C reproducer
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
program did not crash
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
program did not crash
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
program did not crash
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
program did not crash
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
program did not crash
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
program crashed: general protection fault in __hrtimer_run_queues
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
program did not crash
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
program did not crash
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
program did not crash
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
program did not crash
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
program crashed: general protection fault in corrupted
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
program did not crash
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
program crashed: general protection fault in corrupted
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:false IEEE802154:true Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
program did not crash
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
syz_create_resource$binfmt(0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) (rerun: 64)
write(r0, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program crashed: BUG: unable to handle kernel paging request in rcu_cblist_dequeue
validation run: crashed=true
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
syz_create_resource$binfmt(0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) (rerun: 64)
write(r0, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program crashed: general protection fault in __run_timers
validation run: crashed=true
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_create_resource$binfmt-ioctl$KVM_CREATE_VM-mkdirat-mount-openat-sched_setaffinity-ioctl$SNDRV_CTL_IOCTL_ELEM_INFO-write-fstat
detailed listing:
executing program 0:
syz_create_resource$binfmt(0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) (rerun: 64)
write(r0, &(0x7f0000000240)="e4b0cd06c5c81d66a430daf8eb3506e4a069c3de1af28e1803e2c6759e1a3bae6f8fc0cc4ecd08b554e2170a6e67a9f0d86cd0dc255e741093a0358b00cdd8d583590f5be7a22e857772693ce4423c6f87483b8410f2d5fe7670cd57f41c2b9fcbe1e54cd2eda241f01d1009ad03d2edc0a62424b7db8a4f01c0750935", 0x7d) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async)

program crashed: BUG: spinlock bad magic in sock_wfree
validation run: crashed=true
reproducing took 1h26m36.661817133s
repro crashed as (corrupted=false):
BUG: spinlock bad magic on CPU#1,
BUG: spinlock bad magic on CPU#1, syz.3.20/6131
 lock: 0xffff888046117940, .magic: ffffffff, .owner: <none>/-1, .owner_cpu: -1
CPU: 1 UID: 0 PID: 6131 Comm: syz.3.20 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 spin_bug kernel/locking/spinlock_debug.c:78 [inline]
 debug_spin_lock_before kernel/locking/spinlock_debug.c:86 [inline]
 do_raw_spin_lock.cold+0x37/0x3c kernel/locking/spinlock_debug.c:115
 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:156 [inline]
 _raw_spin_lock_irqsave+0x42/0x60 kernel/locking/spinlock.c:181
 __wake_up_common_lock kernel/sched/wait.c:124 [inline]
 __wake_up_sync_key+0x1c/0x50 kernel/sched/wait.c:188
 sock_def_write_space_wfree net/core/sock.c:3780 [inline]
 sock_wfree+0x5c9/0x7f0 net/core/sock.c:2734
 skb_release_head_state+0x35f/0x400 net/core/skbuff.c:1166
 skb_release_all net/core/skbuff.c:1186 [inline]
 __kfree_skb net/core/skbuff.c:1202 [inline]
 sk_skb_reason_drop+0xc4/0x1b0 net/core/skbuff.c:1241
 kfree_skb_reason include/linux/skbuff.h:1329 [inline]
 kfree_skb include/linux/skbuff.h:1338 [inline]
 xfrmi_xmit+0xd5c/0x23f0 net/xfrm/xfrm_interface_core.c:589
 __netdev_start_xmit include/linux/netdevice.h:5457 [inline]
 netdev_start_xmit include/linux/netdevice.h:5466 [inline]
 xmit_one net/core/dev.c:4068 [inline]
 dev_hard_start_xmit+0x121/0x760 net/core/dev.c:4084
 __dev_queue_xmit+0x1bef/0x48d0 net/core/dev.c:5088
 dev_queue_xmit include/linux/netdevice.h:3485 [inline]
 neigh_connected_output+0x3b5/0x5d0 net/core/neighbour.c:1662
 neigh_output include/net/neighbour.h:554 [inline]
 ip6_finish_output2+0xbd8/0x1f10 net/ipv6/ip6_output.c:138
 __ip6_finish_output+0x34e/0xdf0 net/ipv6/ip6_output.c:210
 ip6_finish_output net/ipv6/ip6_output.c:221 [inline]
 NF_HOOK_COND include/linux/netfilter.h:314 [inline]
 ip6_output+0x2a1/0xa50 net/ipv6/ip6_output.c:248
 dst_output include/net/dst.h:471 [inline]
 NF_HOOK include/linux/netfilter.h:325 [inline]
 ndisc_send_skb+0xa8e/0x1bf0 net/ipv6/ndisc.c:513
 ndisc_send_rs+0x129/0x680 net/ipv6/ndisc.c:724
 addrconf_rs_timer+0x424/0x880 net/ipv6/addrconf.c:4099
 call_timer_fn+0x198/0x5f0 kernel/time/timer.c:1749
 expire_timers kernel/time/timer.c:1800 [inline]
 __run_timers+0x757/0xb00 kernel/time/timer.c:2375
 __run_timer_base kernel/time/timer.c:2387 [inline]
 __run_timer_base kernel/time/timer.c:2379 [inline]
 run_timer_base+0x114/0x190 kernel/time/timer.c:2396
 run_timer_softirq+0x1a/0x50 kernel/time/timer.c:2406
 handle_softirqs+0x216/0xa20 kernel/softirq.c:669
 __do_softirq kernel/softirq.c:703 [inline]
 invoke_softirq kernel/softirq.c:542 [inline]
 __irq_exit_rcu+0x178/0x220 kernel/softirq.c:786
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:809
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0xa3/0xc0 arch/x86/kernel/apic/apic.c:1062
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:220 [inline]
RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 kernel/locking/spinlock.c:229
Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 8a 1b f7 f5 48 89 df e8 12 72 f7 f5 e8 8d 86 24 f6 fb bf 01 00 00 00 <e8> c2 3a e6 f5 65 48 83 3d 51 64 c8 09 00 74 06 5b e9 01 4d 00 00
RSP: 0018:ffffc90003487c28 EFLAGS: 00000206
RAX: 0000000000000517 RBX: ffffffff90cc2ac0 RCX: 0000000000000080
RDX: 0000000000000001 RSI: ffffffff8e629989 RDI: 0000000000000001
RBP: 0000000000000060 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880247aa000
R13: 000000004ce5e1cb R14: ffffffff8be39d00 R15: 0000000000000019
 pci_user_write_config_dword+0x150/0x230 drivers/pci/access.c:278
 proc_bus_pci_write+0x531/0x5e0 drivers/pci/proc.c:173
 pde_write fs/proc/inode.c:330 [inline]
 proc_reg_write+0x240/0x330 fs/proc/inode.c:342
 vfs_write+0x2aa/0x1050 fs/read_write.c:685
 ksys_write+0x12a/0x250 fs/read_write.c:739
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f1f2d39fb19
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f1f2e2a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f1f2d625fa0 RCX: 00007f1f2d39fb19
RDX: 000000000000007d RSI: 0000200000000240 RDI: 0000000000000003
RBP: 00007f1f2d437b70 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f1f2d626038 R14: 00007f1f2d625fa0 R15: 00007ffeebd3c9f8
 </TASK>
----------------
Code disassembly (best guess):
   0:	90                   	nop
   1:	f3 0f 1e fa          	endbr64
   5:	53                   	push   %rbx
   6:	48 8b 74 24 08       	mov    0x8(%rsp),%rsi
   b:	48 89 fb             	mov    %rdi,%rbx
   e:	48 83 c7 18          	add    $0x18,%rdi
  12:	e8 8a 1b f7 f5       	call   0xf5f71ba1
  17:	48 89 df             	mov    %rbx,%rdi
  1a:	e8 12 72 f7 f5       	call   0xf5f77231
  1f:	e8 8d 86 24 f6       	call   0xf62486b1
  24:	fb                   	sti
  25:	bf 01 00 00 00       	mov    $0x1,%edi
* 2a:	e8 c2 3a e6 f5       	call   0xf5e63af1 <-- trapping instruction
  2f:	65 48 83 3d 51 64 c8 	cmpq   $0x0,%gs:0x9c86451(%rip)        # 0x9c86489
  36:	09 00
  38:	74 06                	je     0x40
  3a:	5b                   	pop    %rbx
  3b:	e9 01 4d 00 00       	jmp    0x4d41

final repro crashed as (corrupted=false):
BUG: spinlock bad magic on CPU#1,
BUG: spinlock bad magic on CPU#1, syz.3.20/6131
 lock: 0xffff888046117940, .magic: ffffffff, .owner: <none>/-1, .owner_cpu: -1
CPU: 1 UID: 0 PID: 6131 Comm: syz.3.20 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 spin_bug kernel/locking/spinlock_debug.c:78 [inline]
 debug_spin_lock_before kernel/locking/spinlock_debug.c:86 [inline]
 do_raw_spin_lock.cold+0x37/0x3c kernel/locking/spinlock_debug.c:115
 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:156 [inline]
 _raw_spin_lock_irqsave+0x42/0x60 kernel/locking/spinlock.c:181
 __wake_up_common_lock kernel/sched/wait.c:124 [inline]
 __wake_up_sync_key+0x1c/0x50 kernel/sched/wait.c:188
 sock_def_write_space_wfree net/core/sock.c:3780 [inline]
 sock_wfree+0x5c9/0x7f0 net/core/sock.c:2734
 skb_release_head_state+0x35f/0x400 net/core/skbuff.c:1166
 skb_release_all net/core/skbuff.c:1186 [inline]
 __kfree_skb net/core/skbuff.c:1202 [inline]
 sk_skb_reason_drop+0xc4/0x1b0 net/core/skbuff.c:1241
 kfree_skb_reason include/linux/skbuff.h:1329 [inline]
 kfree_skb include/linux/skbuff.h:1338 [inline]
 xfrmi_xmit+0xd5c/0x23f0 net/xfrm/xfrm_interface_core.c:589
 __netdev_start_xmit include/linux/netdevice.h:5457 [inline]
 netdev_start_xmit include/linux/netdevice.h:5466 [inline]
 xmit_one net/core/dev.c:4068 [inline]
 dev_hard_start_xmit+0x121/0x760 net/core/dev.c:4084
 __dev_queue_xmit+0x1bef/0x48d0 net/core/dev.c:5088
 dev_queue_xmit include/linux/netdevice.h:3485 [inline]
 neigh_connected_output+0x3b5/0x5d0 net/core/neighbour.c:1662
 neigh_output include/net/neighbour.h:554 [inline]
 ip6_finish_output2+0xbd8/0x1f10 net/ipv6/ip6_output.c:138
 __ip6_finish_output+0x34e/0xdf0 net/ipv6/ip6_output.c:210
 ip6_finish_output net/ipv6/ip6_output.c:221 [inline]
 NF_HOOK_COND include/linux/netfilter.h:314 [inline]
 ip6_output+0x2a1/0xa50 net/ipv6/ip6_output.c:248
 dst_output include/net/dst.h:471 [inline]
 NF_HOOK include/linux/netfilter.h:325 [inline]
 ndisc_send_skb+0xa8e/0x1bf0 net/ipv6/ndisc.c:513
 ndisc_send_rs+0x129/0x680 net/ipv6/ndisc.c:724
 addrconf_rs_timer+0x424/0x880 net/ipv6/addrconf.c:4099
 call_timer_fn+0x198/0x5f0 kernel/time/timer.c:1749
 expire_timers kernel/time/timer.c:1800 [inline]
 __run_timers+0x757/0xb00 kernel/time/timer.c:2375
 __run_timer_base kernel/time/timer.c:2387 [inline]
 __run_timer_base kernel/time/timer.c:2379 [inline]
 run_timer_base+0x114/0x190 kernel/time/timer.c:2396
 run_timer_softirq+0x1a/0x50 kernel/time/timer.c:2406
 handle_softirqs+0x216/0xa20 kernel/softirq.c:669
 __do_softirq kernel/softirq.c:703 [inline]
 invoke_softirq kernel/softirq.c:542 [inline]
 __irq_exit_rcu+0x178/0x220 kernel/softirq.c:786
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:809
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0xa3/0xc0 arch/x86/kernel/apic/apic.c:1062
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:220 [inline]
RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 kernel/locking/spinlock.c:229
Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 8a 1b f7 f5 48 89 df e8 12 72 f7 f5 e8 8d 86 24 f6 fb bf 01 00 00 00 <e8> c2 3a e6 f5 65 48 83 3d 51 64 c8 09 00 74 06 5b e9 01 4d 00 00
RSP: 0018:ffffc90003487c28 EFLAGS: 00000206
RAX: 0000000000000517 RBX: ffffffff90cc2ac0 RCX: 0000000000000080
RDX: 0000000000000001 RSI: ffffffff8e629989 RDI: 0000000000000001
RBP: 0000000000000060 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880247aa000
R13: 000000004ce5e1cb R14: ffffffff8be39d00 R15: 0000000000000019
 pci_user_write_config_dword+0x150/0x230 drivers/pci/access.c:278
 proc_bus_pci_write+0x531/0x5e0 drivers/pci/proc.c:173
 pde_write fs/proc/inode.c:330 [inline]
 proc_reg_write+0x240/0x330 fs/proc/inode.c:342
 vfs_write+0x2aa/0x1050 fs/read_write.c:685
 ksys_write+0x12a/0x250 fs/read_write.c:739
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f1f2d39fb19
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f1f2e2a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f1f2d625fa0 RCX: 00007f1f2d39fb19
RDX: 000000000000007d RSI: 0000200000000240 RDI: 0000000000000003
RBP: 00007f1f2d437b70 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f1f2d626038 R14: 00007f1f2d625fa0 R15: 00007ffeebd3c9f8
 </TASK>
----------------
Code disassembly (best guess):
   0:	90                   	nop
   1:	f3 0f 1e fa          	endbr64
   5:	53                   	push   %rbx
   6:	48 8b 74 24 08       	mov    0x8(%rsp),%rsi
   b:	48 89 fb             	mov    %rdi,%rbx
   e:	48 83 c7 18          	add    $0x18,%rdi
  12:	e8 8a 1b f7 f5       	call   0xf5f71ba1
  17:	48 89 df             	mov    %rbx,%rdi
  1a:	e8 12 72 f7 f5       	call   0xf5f77231
  1f:	e8 8d 86 24 f6       	call   0xf62486b1
  24:	fb                   	sti
  25:	bf 01 00 00 00       	mov    $0x1,%edi
* 2a:	e8 c2 3a e6 f5       	call   0xf5e63af1 <-- trapping instruction
  2f:	65 48 83 3d 51 64 c8 	cmpq   $0x0,%gs:0x9c86451(%rip)        # 0x9c86489
  36:	09 00
  38:	74 06                	je     0x40
  3a:	5b                   	pop    %rbx
  3b:	e9 01 4d 00 00       	jmp    0x4d41