Extracting prog: 42m45.967479039s Minimizing prog: 2h42m26.545299577s Simplifying prog options: 0s Extracting C: 1m11.195241784s Simplifying C: 1h11m56.361395338s extracting reproducer from 39 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-syz_init_net_socket$802154_dgram-getsockopt$WPAN_WANTLQI-sendmsg$nl_route-openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP-socket$nl_netfilter-sendmsg$IPSET_CMD_FLUSH-madvise-ioctl$VFAT_IOCTL_READDIR_BOTH-unlinkat$binderfs_device-socket$inet-sendmsg$inet-getsockopt$IP_VS_SO_GET_SERVICES-syz_usb_connect-syz_open_dev$char_usb-socket$inet-recvmsg-sendmsg$inet-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_STATUS detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000140), &(0x7f00000002c0)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800050100040000000000000a140000fe030001002d00001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async, rerun: 64) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (rerun: 64) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000180)={0x1}) (async) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000000)={0x1, 0x1}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000406010100000000050000000500010007000000"], 0x1c}}, 0x0) madvise(&(0x7f0000693000/0x4000)=nil, 0x4000, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00') (async, rerun: 32) r4 = socket$inet(0x2, 0x2, 0x1) (rerun: 32) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000200000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) (async, rerun: 64) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000200)=""/154, &(0x7f00000005c0)=0x9a) (async, rerun: 64) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r5 = socket$inet(0x2, 0x2, 0x1) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000000) (async, rerun: 64) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000200)="080016fbb07d586e", 0x20}], 0x1, 0x0, 0x0, 0x60000000}, 0x4000000) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000440)={0x0, 0x10000}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000004c0)={0x0, 0x1, 0x8, 0x0, 0x4, 0x2d2, 0x4, 0xc6e1, {r6, @in6={{0xa, 0x4e22, 0x4003, @mcast1, 0x3}}, 0xd, 0x4, 0x5, 0xf2, 0x6}}, &(0x7f0000000580)=0xb0) program did not crash single: failed to extract reproducer bisect: bisecting 39 programs with base timeout 30s testing program (duration=39s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 10, 1, 6, 9, 4, 4, 29, 18, 36, 16, 12, 8, 8, 11, 20, 5, 11, 14, 4, 30, 30, 17, 6, 7, 12, 30, 29, 3, 6, 21, 10, 11, 18, 5, 27, 30, 16, 22] detailed listing: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fb7f0cff0000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="f77d2979697bae33eb5eb56df99d", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, 0x0, 0x0}, 0x94) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000640)='./file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000140)='./file0/../file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, 0x0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x3}, 0x8) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e21, @remote}}}, 0xa0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x8, 0x2, 0x9fb, 0x2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) executing program 32: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00b500000000000000000002004000fc80c8090000000005001b"], 0x24}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x91, "88ff831a719aadfff2cb15f6aa7852bde76549e0c9350009d8b1f0f542a82c0b88009fafb250f6358294c54f76f9e340dd8cea2f0db9be88654264d2b47fdf56520bfa26ee1a5fd49a233cb59e744cbf256462bd119016e5cce053ab62bf6e43ad9439d6235dd4da552696e40cd6640d56691fca637bd3136268cd44582b102dacaf51c2b2e6fbaeb84f56867bcd51f29d"}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'gretap0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES8=r8], 0x50}}, 0x4854) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000000)={0x4001}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00010200000000000000fd68000000", @ANYRES32=0x0], 0x1c}}, 0x0) r10 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r10, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e21, @remote}}}, 0xa0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f00000001c0)={0x8, 0x0, 0x9fb, 0x2, r2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x20000855, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x44) (async, rerun: 32) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 32) getpeername(r1, 0x0, 0x0) shutdown(r0, 0x1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) (async) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0) (async) r4 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x18fd9ca9fb75925e}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006500)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xfff1}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000) (async) sendmmsg$inet6(r4, &(0x7f0000001e40)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00', 0xfff}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000200)="f12be91ec076bd1b1c3fd7d003f779dba0fc628f382beac41eda3f250ad8c9768b36ba3c777e76f3df658f781adee1f0b342eccfab2bcb59015ccabe7d7111af8dcd2231eba3e58966ca27f9ba875eca12602b46676b79b93b75b99bfbc3a3658e8eaf4416", 0x65}, {&(0x7f0000000340)="da18e45d7cf8b3d699649de973dd65ff8db0ffb7351b80e307e75b86e74eb527e05aa5a43fae6bd76fe0639099c11b0631b67178b2dce433fcb3f96d1b89c9cc15d3aa0c402c3d4c0b07eccabfa126e99acaae5f0d389e7d21ca2d14e04786735491b3667946e63d34421e9bf6148332c280204cfa6c9b38cfccd81c6ce0f3524d62e99925a86f10a33ae38ec1573a3b53eccb52a4cadc6d73b4d270bf222f9e2d7290fb8787355c3e4c0d466f1a7b3dd9b333750221897326cfe38cd321b214b629fc26edb890c9d7c6eed22812ccc0d0f91836e1452ba435c890a340d10ee0a93379f8fca64b97dc76586608", 0xed}, {&(0x7f0000000180)="54b7f723a3d7ca79ff27157a44c095d1a51002773bcd433471c65cbd207bd7d67ac194167f5c3929f1a4a6138ee770", 0x2f}], 0x3, &(0x7f0000000440)=[@flowinfo={{0x14, 0x29, 0xb, 0x400}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0x30}}, {{&(0x7f0000000480)={0xa, 0x4e22, 0x3, @empty, 0x6a8}, 0x1c, &(0x7f0000001780)=[{&(0x7f00000004c0)="e06927fb053ebfb13d819c8e38de2616d4f28dfc7e08c4d9bdd67c8bf79ab53425628769005554334a919e8365905b260574963be5b075b8f7c6d40a00345a2c9e35264e2df761381dd1244b54c5b958e4d466acfc7b09876a08d0d2b01576d5f34ed8e5c8dd28a3d70a0a9403ea0bd8993c4e06bf92437d45135e2fb1264fd2fffc00b2f14311a15b4da85bae7d3bdfcec617d7af172b4cf76243e8f5ddbd2dff027270413008f44b043544f6270c3dc3c59418ddc53b586f2b87fa1a1db26b7561b74da62f84b4ace5360c4f0543ce6a2c03d33b966fb73b0939aff4614cec6bde74513e5a4171765b8b4ad97bed2110f92b8c69e33c72b8bc70a02d5bb5792d71520accf2c73fe60caca2ba4f67a93d90ae3dda502c99ca22de1887ecb5bf7a72dc01dae3075189bd8eb1a6777dbd1b81e96eb7b67d348def36de32d068cb0768042ffd01b7a76f693f86e7e46757df97a342d8f7c3770bc8dd65789111c45fd09e254d2365a4521967de0a4e9397a02163b82c4e517c348b7084dbe9283f1bb7d8451a42c405fe655f589b4c5e1e9fd8186d92e5965f0444e7ce041d8edf1ab154d92fea537e38c2b4e7b3d14a30e2d173329271cf3667dcffbccc2b834a8ad00c03325903140ca2a18a1ca390d93b59ee8b6f58443bdea80b23c5e0ce1a9559fe2ce607563fb054401bf4200581b5fc82b5234c3aeaa5f05388f12413ca98686034aba5139029afdf1477f7d4b5a143eb97ca62c46d50e983e870fd83d9709a4dceb9b126a65a5f385d74c015a66420856ae94afd991e5624f8ef3aba54b7bc47e620c3a412ab739533c9999eaed7a9c97d3d017209b81760ea89029348c00693a88097a901f8a75716449fa7e6b7edcd1d2d11fc227bcea45f78c083b9f9288a630e80819b0ed30ed615370f2db3b1f3bdf590fbbcccd26f5f8cf679fc54c5264665f41db43128903b93be7672b3805d51543871bd87099564fd2aa73e7fbab73b10ba15a641717102a7d7041d87d8d6cc9676d748276ad153b06b7690d53b0be0cf80fa9f888704b9a100c09ce1ac30ae4411534ea2f43c35f8b24e0484286cc4e62c4186eedb344ab0fd62d7902c813ef9e6fe82bcb1aafa322a634a16599192c64f16705286f6d3edb3ccee05736d8864296962b0940f2cbfc0ad8185d972c4c52abc74f4aaa1fe74dd5cca4ee349b1ca5c355cce1c14c28f7e13cb2029b396700541591665ba1a3af1abd0d86e446df9ad317423d7c0de02f95f215894eea700356385e009804ad6f67d9f3ae396421a8bb50f8a44b240a67d021796b8e1f0bfac376b260b585744f44d5894f707ff3d286c297d0e8e08cca483d54352a5ab74baddc3d6efe89fb390c1485fe273e48961374a31b1f54cebd0171fd45f1ef10f5b7cd5ad87c26d9f0e8a1668eea89ec565e0fee46f5508d72fe0da4e35855f9897908c1057dbf00643e230d6f75aff35b563a862ee9800763447eca79c30b497fcfa0a245e3bc69ec2049ea305e400ea0a8af5195ea9bbb3bbce614703a05390bb6919b6f0af034cc442637d078f9610ff1561644833922388a8f533ae17f456dded5f0cae318cba6433b50f0cc17df8347291439a4e2a18beca1c6a263dfe1f1f538bd35b35359f17a0c442ddffd7f1fece82db05027085904a355c82c9b706be9d61831f787bda442bdac060361ff231b6f08286f6e259d73d0e5f27a08897e72a65d0d425d2a7748a3bc31070d3bd70dd58927b4e605f3749bb70ea4681640bfc451d40880a83fbfecbd0c81c14810a1848a71de74f64190bdedc8f350d93e219112774abe8c74da2935aac87da9809541796a5bcd91bae8261eb8e336bb94a5ba419d3f03fd87a51cec57e68c72a6e442274f6b1eb321453d9daafe5b481e5aa127d1e184bbc7458af0e77b1e464e4090b0df325a8b59ac9c78ceacb75c35285043d9993e38f855f3821b4ed10db555faa10b7a963b61dae4a0fa09e87cc0fa5c417396d3bdde4accf90d8aea12789810420e288f4f54d99259db5a2c402ad73c32d7c03764ee25b9818a53393143c1b6c7d97e208f9ee104c0474f7a624338bcd563ca030d304a8167ca4959935c85b4d3c91b227cb0696e3cfb2b7700820f6bd6113c52456ddd6849e072d600c1a1b878acf802e8786129583b1b8dcc1b9753e5300742b44b1719fd6e38f7336ff0b9620b57d788d4a23e5e60057fb9575cd2b067e457069dcf7e1445f72bcccf1948d560f20dc10ef99262de3707822a744f2aa376451fabc2bbcc8834daa1961e48e82d227ef7b9c4fa7e594d7497bf5701963e9e42cec98cba0bfe6e9012b26fae8f2d59a0918d67107d55268850cd65f83084b7e4726babc524ff3a189925705bf23c1f421f7ac45f3d2302b3f5c90a238f5cfe6d5b938b0172d2d4bb2c3170fd80b600e26fef6d78e47309a8a71029b281aae239c6c2ca41f58c5f2f0db96c5ce68a466b9ee9d20123cbaa2b5b889542fa971c6513f6bcad8c1ce8aa86fd6a3d1c263834bb5a113330768bf331fa97b9ea7034b5b73b360d3f6b9d0ab0d77aaf7c449e2ce0381bfd1c7766c265a6164dc6b458725ec1885e7f556d3156c72cd60a654dfa4a7b39868cc8ae0d7c8c937b2cdde19a3d80eba6aee4af7f1823befec109186c86a069b074bfd90e08d33730b022dbbee3d1d30a9546c6e7053d00c07bf1fc2ffdb6efab72ef252a34c87ca14bbe315728469a536863e1993f351f8d37ab937b05c7994960134a8226e3c6982dd3b0db096505b546b84149023669cb02b1b789c7082ff3c01f9a30e05491b4c719f449eac5e2ff942344075dfd0acabdfc412daba1a77b3c0f64dbfff815bdd07d6df449d9a6cb0ebeb5bc93e3a8e74113266bc9fd890688d63928c56e299d04ec6dad12e10392bd83bfcd46f3a15f836890b444a84ff6447ed60f5de99450134657ab6d2ab973c755c0fa2eeb5afa06e1d6c522c82fb5499adc7db35622f2f736c7936827d38366ff9eaedf1e350c1824e0da12aeba43e1ca726b8abf87943ec85bdcb79dca572ebda71c7e099ca93c080a64838610317aaac6803e621fc1385048f2cdbd2503e16a1af1e94e0142024dbc025621e90d31af6b63c3a3844a30ade0b316d87355c194fdfc18452cbec54042b884de5f741e843ce90869380ff9a0f4864343c23bf23ebface3400310e210ca95d751d66044babb94d4c3f54b5f65d0b3895766dc6a7617fe01605407e9efcf8d7f0e38e3fe1162ab85ae1728344f8071ff44fefbe96d91556a465baa5315decd9c8069e815b73c56dd60a6230a75a267771eea4572a3add3b8ba367ada59a1e6853f3bed3f61711c82b42e45812346fabbdf75bbc23245636b1d834f292f6b82ed796b13f9f2f2c0a966c81f8c5cdaa80548abe9af7ed52343056f03d8ccf53c04c39ad6de85701cb28447635d947a59261be48f96e7dc1d576b481a26765a937e0743a1cc9f67877e8cc93e1fe3e7f98341d887e1e11e839772924543491a67537098f815aaa306df4f75ece1a10f268a67d8f4bae57b32261929a3f1f5d0e23d32ff352b1758f4655ff15edf1377e2dc61a54ec43653ead9f4512ce6f2d0e67b1290d6efb4f84ee1d80871db9acad8e274c37f9c4f6a74d1ef6929e9ebc9478a2f48cf1b739e81a9fbfb22c4476fb9837f8ffe1b69ce9a53d83b542f4b934e092e8a1644e77f9ddbde7806f8385dfbc03c0a4a9be52e14f03b9b7f68b78f00e844e5fe81fb5b0ac194ba983b86cc8e63e11c28a7a9b039c44ac65b881d012f40554ef068858e231ce765724a30686266be47522c9f8faef81d8e5e452469ad2155c13e2a63559f638a6e3f40fe19b2cb518abaa16b4e36a5a398d15300bdfa984d85ba52645ca9331f06c11daf25c2051dd7b7a5ccb721006bf8b1e4ec0592bc9a99539f8165a9a435da62044af89eaf6236e09f3609424276a1f39c9b15de14b56ee6ee2f9a179e5e3e81dad7a5f7befe78627bedb100841e86ddc21e534fa731f8e1f3d93872de09ff62caee621c9b4c5b3b0ddb2081d1bd1cdd438edd370b69dfc4b8c6fe935e49238ac9f00f2c957ffaf49c6ce570fe2fd651f6b7b5cd09f910086c0e80a3b31763dfcef9397e55e740cf6c2350b5512d4f0dae0a54591ecdd921dfd4008d9a7a7dd0d12a74883e3a9ac1a4066946ed53623fcbfc26fda1929b76c3adbc125326630f719c2f157c970183606fd6c0bcf6c9876ebc70f72c266584ada43be7ad6dc3153e3da8c343442735393787afbe9212ef9e12db2a959fe4a64d25d979b557cf46466f453bae912a203b7b9ecd14ec4000e85ede66a5e314037006cd87df0ba4b1e77494a91fed4d50d80ca3219a209381daf53ef97857e69e1d1ee4805ff9fb687ec144dda78036b3c76f1b5e8c07bde1589bd0af4f9a81865266cf85e1c30bfbf0bb71b9a8b0b8a3fb0cb1d887af761a7daae68a4f3646eab984abd748f6a1b1fcb180a841dd68bc57c67362932c314dbb9840b39d9ea66c42fab50ab14c4013550dc3e7d89ebbe48bae6e6465d5de9d2c74788da6c840efa913944515555a5a7829e7e729bbed276be1b2bc5dfea5dbb700ad076a6295938ecb7a9865678ef50e2b3ad4e8484f0d3e5dddf02273c94b323f5ce92882448fbab76aa48714045d20067531e8dce21145dcc4d18733a6147aa00c66916fdf4493810b0247731b90fef21199b8309dc56ebe4d632b67ed07b2957f3ce6a5a7afb524b5e630a0f1b120f0b73417500f8c5ad44ff4ec48abe0548454017840d3c6353d18bf846669c22c513a7011867b10bc5ba9020c83c698871689966f17a7a6c395244036c63150e213a29578b7a8b2c86a852fe5cfc463d0400137ea4abf5c858039516c828f0c3c2da4ec0ff8d9b437638c86b7de2983923244df41b86374ab8a41ccbd8950989d2b911dfda1bcdd5c9e949264ebb751122df6e1d049c44935fc9575c3b1de64c4f07ef2febb21f1c6df80cbc5a4753d0f628459a2b16a2ed13eeb787aa0549a75a6c78b13b353e89623fe47f7e943d04946f416d47453a5bef1ef2807ea4327a099c588fd92f33fa46a51b7f900fa7a4d6fe94dc01db54b69aa95fac0fe7d1b355b68b2711ddad0d74cc4647853909fc3fc1b5cc3fc065cb2344df54cbb8ef24f99c0029292710f31d3fa2d9bd46742210ab7e0632599eb2779d3780da145ae1d1bbf9973bc687fa376b6ce70da480c46211d1afd6f55b5d1aceae529e1384335152db8b810fe86cb90eec5692a73e7980cccf476817f2c1af6e96e59b3ca1a4f13ebed900a5c6e715d52d97c23a3ce4373b5d044348c6661f865dd9916adb412a2d638cf49061c1fb95f2891f50f89fd05a41c91951764fc7bea320805b7da4ac34a6ce86e95f5cd4f93514e494d710eee246e4364a2fd0c2a6903ad4243cbfa313e2dc2c1abcf9761ae3d16bdb60a284da12feb8336820b1f02b71f880608a57844c1860f1ae3a947aac86e8a39bf5a82448144c5ad959831e14b788ca0b096392df429b60d4c297715c528f2cff9925bf0517271e704904cd63190b765664432a4701100fb08a964ed0eefeab8f8438c48a64f2b5c2d94695cf76f628b68fd0d65247b0cfbb09a11a1d73dc5d18cd79916a5f99be733b3d450632bd2fca038d27cee8ae1a23b87b3f8e5e2105c4120c8aa5af537a11ff3a5ad999fad7485e1e6192e97fcf754d0f7285bad6d7a7e0413eab0837ea58bac590acbbb10f13bb7a1e1b4157b594ed87902920031995a0c8f929c154bd3317", 0x1000}, {&(0x7f00000014c0)="0daaed1daacaffc22100041ff8b90ccddff64a365e9e1231e77871ae1bc2cd771fef5128afaa7309feb0d84fd518beac86b94c5156b39c1e772e03dfc2284c01568b324af56120d684498be33b98689d934cc5cfa079a4002787d6bcc4e189f2dbf7c1a609357d4fde475b19b7ee1f4df428b31a2c63d70649dc64c64a33f5fadfd6d05ee53ac3ec9c419fc237a68cdc54afff24f55185a39107159adf4d816ee92bcb82116979bb9487a9b2907adf1ec4793252daaf0c2e01414dcc9b56b3c069727be6", 0xc4}, {&(0x7f00000015c0)="22e076db7548", 0x6}, {&(0x7f0000001600)="e63e7a9cab6fef1069dedb2d901cbdc424cd5a0bf9331dca2c171f5612c8b1e73f63ef8993884a6683584976435c1e75c45ca4bd87df87d329661aa549ed2e8887", 0x41}, {&(0x7f0000001680)="55e527040669c76a3e7f16e55e4ad28b618c029e2577da32a9b1b557966fe7f1f80aeb3d234f27271693bcdf2de236f0fd8a596ba4618e5fb4bc5d61e5eb634339d8a8050ccf795ba6e129a372b8888572b35c812c4243cf33dfc45b5db757642be3487b0812af7bcaa81a914674893e72b1aff0673b8b9f5ac4e07be38371c5060a83d839f61af94655bb44651fbb09888831c83ef2dbd73150aad4fd162b65a7d16e91e3b2f8f3b65edef82a3acf969504f60d3e10f2d862e927a1bf1402001e5b596a149639b5bbdd3a1d370ef40a6c", 0xd1}], 0x5, &(0x7f0000001800)=[@hoplimit={{0x14, 0x29, 0x34, 0x8}}, @dstopts_2292={{0x108, 0x29, 0x4, {0x3c, 0x1d, '\x00', [@jumbo={0xc2, 0x4, 0xf}, @ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0x7}, @ra, @jumbo={0xc2, 0x4, 0x7fffffff}, @calipso={0x7, 0x8, {0x0, 0x0, 0x5d, 0x6}}, @generic={0xf0, 0xbb, "36f1b2cd9f370ad50fd094f7395d7109a683a36c17252d94d8e315afa6bddde24778d7b9f7b31abf6294a561a5806b0bd3080e0d389ac90511ee7214b3ae099abceee72484e443f99df05f920156e34aafdf060e9eec462ce16185948955a14b92c5dff10fd0271f6a1a4dc8a6c5360716ce662727e00822c4da5691aff34e902bee5b822c89594f15af9fb8bb4286cbbfbc349b25214dd83ecbafe1d6abd221dd55fcf96d0a3feaa3d63c0b57e407778f73e83ae247f5acb45870"}, @ra={0x5, 0x2, 0x200}]}}}], 0x120}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001940)="d6d278315018235c6d04f791fe4731040d9d1bd67276935cd6c007a223e9577462691658a54354ef13b0b785d13465ae0219c18586e5ad06fdfb3cb5dfc7", 0x3e}], 0x1, &(0x7f00000019c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x2}}, @dontfrag={{0x14, 0x29, 0x3e, 0x45}}, @hopopts_2292={{0xe8, 0x29, 0x36, {0x3a, 0x19, '\x00', [@generic={0x7f, 0xb6, "7ea985dd4e2771ce1c823a8705ffb740cadd81da07de938f2d08b3f2a45ef3353ca033cc7b2df12b980c536c48507327230abad3d099104858ed5332a0d811fadc0f9654097819506882838182c36a4b7a7588adc9ce092508ab226b59073fcf2dedd79c1f8137bb52650719b0610fdeaeb59b93e5e27e7d16a03d2224e718e3a1295f87ba9657fc67f147ab1bc7ada95e717a75433101ecd3c88ae8557af2bebb80ecc7ad9fc6168c1fae8841bb738dba634619ae03"}, @pad1, @jumbo={0xc2, 0x4, 0xfffffff9}, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x1000}]}}}, @hopopts_2292={{0x78, 0x29, 0x36, {0x3a, 0xb, '\x00', [@hao={0xc9, 0x10, @private0}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x38, {0x1, 0xc, 0x5, 0x64a, [0xb517, 0x9c3, 0x5, 0x7, 0xee7a, 0x10000]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r6}}}], 0x1b8}}, {{&(0x7f0000001b80)={0xa, 0x4e21, 0x0, @local, 0x468d9959}, 0x1c, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)="7a748d9ed89cb59a879f997d2cd2e10408a13c35ea31cea7cdaf6caa19282ffa8d6805a48526a7bb554bfb72dfa8eb5f38cc7fad6d10cea95aec30dcbf5385371d28f50e4fe8ca25eb1e802cb1d67f5caf17c1323a5f0f7f86e647ff74fa18965334878c51a50b3aa873224d42feee30c6df6c8349d21210032ed92b7c495d504a5191089b5b7c886eb73497e2b279e68572ce6009fdc97af5461cf4a3e606bcbe7cca763521c4c0e6d67f51c2a0208ca0a34db32fdcfcb5a59a396dec4d6fbd16a3643616653054eccb2866e6b6b9a22523b0142f5fc9093bedd71aa9cd2314c8d2265a179dff1723f214", 0xeb}], 0x1}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001d00)="a2246f1e68fbae67af2059f113f44f2d370b1c3d15ec77334830b3d85c903e0042b2daa3bb495a78cc3f074e669d964e166ea7712afb31882fe7cd4d5fe47b77baec0596f57773626715d1a0947991f4a08cb60210051bdda203702928e11317130d98061017d5eaf276acdf7327cd8cf75418bde860126b7297f3aaa5d34dc3a9e70feb75044c54308701bdac1681538e2cc79c35e80213b63a2d50d71deb3afac3a247f62f87a45a9d76cefd251180f9d50e741722e00226de935be449a6034b5676fb650de392b58c7f13728f39b0", 0xd0}], 0x1}}], 0x5, 0x40008c0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000040)=0x7fff) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_settings={0x8, 0x4, @te1=0x0}}) ioctl$sock_netdev_private(r1, 0x8948, &(0x7f0000000000)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c6313}], 0xfdb4, 0x1000000, 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r5, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) close_range(r2, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f00000001c0)={0x2, 0x0, @ioapic={0xdddd0000, 0x1, 0x80, 0x100, 0x0, [{0x3, 0x4, 0x40, '\x00', 0x7f}, {0xd, 0x0, 0x7, '\x00', 0x8}, {0x1, 0x6, 0x80, '\x00', 0x5}, {0x7, 0x0, 0x3, '\x00', 0xff}, {0x5, 0x2, 0x81, '\x00', 0x9}, {0x1, 0x5, 0xff, '\x00', 0x89}, {0x7, 0x0, 0xd, '\x00', 0x7}, {0x7, 0x63, 0x60, '\x00', 0x3}, {0xe8, 0x0, 0xa, '\x00', 0x5}, {0x9e, 0xa, 0x0, '\x00', 0x13}, {0xdc, 0x0, 0x4e, '\x00', 0xff}, {0xff, 0x7, 0x5b, '\x00', 0x72}, {0x2b, 0x5, 0x14, '\x00', 0x80}, {0xfd, 0x40, 0x80, '\x00', 0x8}, {0xaf, 0x8, 0xf9, '\x00', 0x1}, {0x5, 0xff, 0x1, '\x00', 0x4}, {0x1, 0x4, 0xd5, '\x00', 0xfb}, {0x1, 0xe, 0x0, '\x00', 0x7}, {0x8, 0x2, 0x5, '\x00', 0x9}, {0xc, 0x6, 0x4, '\x00', 0x3}, {0x1, 0x7, 0x7f, '\x00', 0x81}, {0x6, 0x7, 0x8, '\x00', 0x94}, {0xfd, 0x9, 0x3, '\x00', 0x1}, {0x2, 0x8, 0x7, '\x00', 0x1}]}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_settings={0x8, 0x4, @te1=0x0}}) (async) ioctl$sock_netdev_private(r1, 0x8948, &(0x7f0000000000)) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$unix(0x1, 0x1, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c6313}], 0xfdb4, 0x1000000, 0x0}) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r5, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) connect$unix(r6, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) (async) connect$unix(r3, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f00000001c0)={0x2, 0x0, @ioapic={0xdddd0000, 0x1, 0x80, 0x100, 0x0, [{0x3, 0x4, 0x40, '\x00', 0x7f}, {0xd, 0x0, 0x7, '\x00', 0x8}, {0x1, 0x6, 0x80, '\x00', 0x5}, {0x7, 0x0, 0x3, '\x00', 0xff}, {0x5, 0x2, 0x81, '\x00', 0x9}, {0x1, 0x5, 0xff, '\x00', 0x89}, {0x7, 0x0, 0xd, '\x00', 0x7}, {0x7, 0x63, 0x60, '\x00', 0x3}, {0xe8, 0x0, 0xa, '\x00', 0x5}, {0x9e, 0xa, 0x0, '\x00', 0x13}, {0xdc, 0x0, 0x4e, '\x00', 0xff}, {0xff, 0x7, 0x5b, '\x00', 0x72}, {0x2b, 0x5, 0x14, '\x00', 0x80}, {0xfd, 0x40, 0x80, '\x00', 0x8}, {0xaf, 0x8, 0xf9, '\x00', 0x1}, {0x5, 0xff, 0x1, '\x00', 0x4}, {0x1, 0x4, 0xd5, '\x00', 0xfb}, {0x1, 0xe, 0x0, '\x00', 0x7}, {0x8, 0x2, 0x5, '\x00', 0x9}, {0xc, 0x6, 0x4, '\x00', 0x3}, {0x1, 0x7, 0x7f, '\x00', 0x81}, {0x6, 0x7, 0x8, '\x00', 0x94}, {0xfd, 0x9, 0x3, '\x00', 0x1}, {0x2, 0x8, 0x7, '\x00', 0x1}]}}) (async) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x21) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) unshare(0x30000) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xff, 0x40000) chdir(&(0x7f0000000540)='./cgroup\x00') connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x2, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x3) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000040)={0xe9b, 0x9, 0x8, 0x0, '\x00', '\x00', '\x00', 0xffffffff, 0x9, 0xfd, 0x5, "57b5391c329531af1a6dc5337d7a129c"}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000100f42da86cde27ea57040002800a000100bbbbbbbbbbbb0000"], 0x40}}, 0x0) executing program 33: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xff, 0x40000) chdir(&(0x7f0000000540)='./cgroup\x00') connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x2, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x3) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000040)={0xe9b, 0x9, 0x8, 0x0, '\x00', '\x00', '\x00', 0xffffffff, 0x9, 0xfd, 0x5, "57b5391c329531af1a6dc5337d7a129c"}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000100f42da86cde27ea57040002800a000100bbbbbbbbbbbb0000"], 0x40}}, 0x0) executing program 5: syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x30, 0x0, &(0x7f0000cab000)) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000580), 0x4) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180002ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x4080) executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000700)="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", 0x1000}, {&(0x7f00000001c0)="2ba79a3bf66a5ce474b59835", 0xc}, {&(0x7f0000000480)="20f15fe4affa79d59ee1e1a2338f88f03e423eb144b65d2c16416e4e4a86add3521bbaed9e68e5b99cacf5a314f61805ca9f4d86f8bc657d9b6e61a3237d6aa62754cb198de66fcbb843978693760a7c4f30c50b357aa5ae49c6c14dd63530003ebad40b63f0795689b29c89c93e6603e2cb734e9b1c005affe742ff2888fe87c0770cb7c9a1fccc445d0d0e02351bf9268b932309", 0x95}, {&(0x7f00000005c0)="ec1daa728b4513f05b9b0d72992c9ee3a65442e109d8eae39c0ebd8355872c6cf05df20ecf12833bdc16b2db410229e649fe5d12a7006c6c2b375aa31bf742a80ee666e71f546befc1b2f7a880a53955e9a520318fa6b7b47ddfc56f7a57afd4f1461c68a81b89890ee6f9405a81cadd2f253cab9ce0001ae6bd238e0b7359c2a0dd88d8910973624dbae54eba7042acb92c7a8d5f27a39048c532b63d28d245e931d6179f288e4d60e46639d29c3fb5eeca3f4490d248f06c9a27b668e1abc3588243d6f6c7cf11a522c6b9e695fd9f3bf253ea534a0380e7", 0xd9}], 0x4, &(0x7f0000001700)=[{0xa0, 0x107, 0x0, "baf3247ecb2624f076213f70b218201b15ca6783e656ce622432faba41930570cdf5dc3caab0f8f7019360543b771b4398d809f2da34eccb904fc25337c15e46595fd0d7e04eb08fc7340dce6f9d59e4f7d38bdc14007dd3deb3c55829b488983fdf9c9579cede7c148afc9842556980ecf021e5d85a97358a9f606cc05f555933a75d20d6ea5e5319173e8584b033"}, {0x50, 0x102, 0xd0d, "51d13ea27a03274fe0c3344480a5e4b3ae9a5b5d82c6290b98d46ddabb6e27ce1a5b4577a3a29a81121021627f6a3dd3bff8da63159a78087fa2303df823"}, {0xb8, 0x181, 0x6, "3a2477657eb80d54e4d30b7044c114e1aa419e71001d559ba1853df1104b399c7e703038e09584937205c3e28a6d128fa013d5958bc23c1e339c733c3d2edc759140d50910ed1d25a247df2a9ea64a5921a111ad4b43d793defd3d2566211a025edd01ffc4493b2a44267b6ab1eac61c50ce9825586cb74b9794dda179a02211d2662ce9a392656b30b88210be5601a7a70ace9b7d70488b2e577186361830f3a34dc937"}, {0x88, 0x10b, 0x400, "319354c2b7594b7572aad25fbe1b5abf6750f8d1aa0fa63a81f3fbba76ed8e8c4a9acdeec64d437821b3197aa630a41348ffaa02fc2c218260f08d68d03670b1593c671464ed24807249d923fa1a27496750fe56d5ae4f2706598a4b0aa456272c12b580d9e006c739328e7bb2f07b405b38a0c6"}, {0x80, 0x11, 0x400, "72950f58c72df669faacd75f21405cdccfe4a4a8dd7c2ed745ea0555e700865eb968379dd922923feb5b2e75273ee13dad0cf45cb0cb2b6f326729d0c255abe61ea0a490bab76ebaf66a4b6ce1d22937ce68efb33b22d43b31ed6240c6ac9adc52666c9cb6996ea116e0"}, {0x68, 0x113, 0x40, "7a3a6563443c1786da842b64ab10909e0ea7966953bb39bfced8e4cfed39ba8ae428897228a53d71e0b2e91bd891108aac3bb44fd178cf00e927cfa0044edbb66e29507b4a4e04469011d4a7540335a38942584a4e"}, {0xe0, 0x108, 0x3ff, "dd0e34bc24659a388fa1d1d8d69e07c98dcfcbb08809d5c76d12029f0911600e9f683720184a5bb77d186ab72ae72dde7925e52e93082a6b70726e61a6ffe89cdc1457456a013f45b93910465efa551d9be70b30a5c08331ceb555e7767613f6cb72363c1f8c7e4b7ef57a0667ccf57059391bfcf129564ed985263e4ae1bfb94cd5d9f362ca4ba4fe7a76784108d8a529a06ea2222c1d28707c89d4be10e9f60a4f205cabd8f7f4cc71540be95938a389aa5e318839612c647059cbc952cd11d304a500dc1fa67cf545a671d67bbc"}, {0x18, 0x108, 0x2, "7c2476f6dc"}], 0x410}, 0x20008810) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r9, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000080", @ANYRES32=r9, @ANYBLOB="14000500fe80"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0xfffffe36, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r9, @ANYBLOB="14000500fe8091"], 0x3c}}, 0x0) executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ_cpu(r2, 0xaea3) executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r2], 0x3c}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg2\x00'}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r5, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffd, 0x4}, {}, {}, @result}], 0x1c) syslog(0xa, &(0x7f0000000040), 0x0) executing program 5: r0 = syz_io_uring_setup(0x110, &(0x7f00000001c0)={0x0, 0xe, 0x8, 0x3, 0x81}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="e0000000100001000000000003000000616567697331323800"/217], 0xe0}, 0x1, 0x0, 0x0, 0x4c000}, 0x4008004) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0}) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x128}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x10004588, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ff80000}]}) executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000220001032aafb268de926709e7bd7000ffdbdf250200000000e4ff0400f2ffff"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x8080) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000e00)) executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x25a9c0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)=0x4) (async) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$rfkill(r1, &(0x7f00000000c0), 0x8) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000100)={0x0, 0x9, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x400, 0x10}) r3 = gettid() (async) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r5 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000180)={r5, r1, 0x3}) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f00000001c0)=0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_getmulticast={0x14, 0x3a, 0x2, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x8000) (async) r7 = accept4$inet(r0, &(0x7f0000000300)={0x2, 0x0, @multicast1}, &(0x7f0000000340)=0x10, 0x800) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r8, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) (async) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_BUFINFO(r9, 0xc02c640e, &(0x7f0000000500)={0x2, 0x7fffffff, 0x2, 0x537, 0x2, 0x8, 0x3}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5) (async) connect$rds(r0, &(0x7f0000000540)={0x2, 0x4e21, @loopback}, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000580)) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000005c0)=0x400, 0x4) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000640)={'sit0\x00', &(0x7f0000000600)={@dev={0xfe, 0x80, '\x00', 0x3c}, @empty, 0xd, 0xf}}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000680)={{0x1, 0x1, 0x18, r5, {0x3}}, './file0\x00'}) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_DEL_PMK(r10, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x40, r11, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4008080) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000840)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000008c0)={r13, &(0x7f0000000880)=""/23}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000900)={'vxcan1\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000940)={0x1d, r14, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) executing program 3: ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) (async) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xf396a347865e4dd1, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000040)) (async) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x10, 0x7312c0) ioctl$VHOST_VDPA_GET_VRING_GROUP(0xffffffffffffffff, 0xc008af7b, &(0x7f00000000c0)={0x2, 0xf}) r2 = memfd_secret(0x80000) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000100)={0x3, 0x7}) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000140)) (async) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000180)={{0x9, 0x4}, 0x100, './file0\x00'}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, 0x0) (async) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) r3 = dup(r2) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f00000002c0)={0x4, 0x4, 0x9b, 0x74888b83}, 0x10) bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e20, @remote}, 0x10) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340), 0x404000, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000380)) (async) r5 = openat2(r2, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0xcf0bb72914affebb, 0x14e, 0x36}, 0x18) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000440)={0x0, 0x7d, "ae6176a6c5a6a73a1534b41f788274b7f69c928f9ef7edf7606cd58df0ff2d1cf985bd30db1a40d469280c466f58c30ae28a3f7495fcab870ef2cccab00f50f3ffd3c510d496d012fabf080575c6911ece7386b94b53326d9af5d2ea59359c921b612ea609a4b65dc8bd6f8b32e9bef07dbc167b561118f37ee51cb521"}, &(0x7f0000000500)=0x85) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000540)={r6, 0x76}, 0x8) listen(r3, 0x94) (async) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r8 = dup(r7) ioctl$USBDEVFS_BULK(r8, 0xc0185502, &(0x7f00000005c0)={{{0x8}}, 0x28, 0x40, &(0x7f0000000580)="c3f7fa4baad18bbf517c6c6ad3ddd06ff2e37f1aeb572f9c6113eb0e8ac324c311132f4c2c85f7f2"}) syz_open_dev$sndpcmp(&(0x7f0000000600), 0x12, 0x2) ioctl$SOUND_PCM_READ_CHANNELS(r4, 0x80045006, &(0x7f0000000640)) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000680)=[@in6={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, @in6={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc2f}, @in6={0xa, 0x4e24, 0xfffffffa, @loopback, 0x5}, @in={0x2, 0x4e24, @private=0xa010101}], 0x64) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000800)={'gre0\x00', &(0x7f0000000700)={'erspan0\x00', 0x0, 0x1, 0x1, 0x3ff, 0x6, {{0x32, 0x4, 0x1, 0x3e, 0xc8, 0x68, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp_prespec={0x44, 0x24, 0x87, 0x3, 0x1, [{@multicast1, 0xfffffff7}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x6}, {@rand_addr=0x64010102, 0x8}]}, @noop, @ssrr={0x89, 0x27, 0xf3, [@dev={0xac, 0x14, 0x14, 0x11}, @multicast1, @empty, @multicast1, @multicast2, @multicast1, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @generic={0x88, 0x11, "ce26acae3c6db8b8fb1e0cdbeb3fd6"}, @timestamp_prespec={0x44, 0x2c, 0xc5, 0x3, 0x1, [{@multicast2, 0x10000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@rand_addr=0x64010100, 0xe72}, {@private=0xa010102, 0xfffffff0}, {@private=0xa010102, 0x8519}]}, @lsrr={0x83, 0xb, 0xc2, [@remote, @local]}, @timestamp_prespec={0x44, 0x1c, 0x8d, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x2}, {@private=0xa010101, 0xfffffffd}, {@rand_addr=0x64010102, 0xdb42}]}, @generic={0x86, 0x4, "0ae2"}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x15, 0xcaa, 0x3ff, 0x7, 0x0, 0x1, 0x3, '\x00', r9, r3, 0x3, 0x3, 0x4}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x32, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @ldst={0x2, 0x0, 0x2, 0x5, 0x2, 0x10, 0x1}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3513}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x663e97c, 0x0, 0x0, 0x0, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3d}, @map_val={0x18, 0xb, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='GPL\x00', 0x10000, 0x26, &(0x7f0000000ac0)=""/38, 0x40f00, 0x42, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x4, 0xf, 0x3, 0x10}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b40)=[r8], &(0x7f0000000b80)=[{0x5, 0x3, 0x2, 0x2}, {0x5, 0x3, 0x6, 0x1}, {0x0, 0x3, 0xd, 0x3}], 0x10, 0x7}, 0x94) (async) ioctl$sock_netdev_private(r7, 0x89f9, &(0x7f0000000c80)="43cfc8689ea9a1d848644fc13e80f91298dc4693c759d4d1b909036e04e3067b9a3ac850f13802cf389a8d6d307d667d435f39c046d22f5f920da2af1c2d28819e82e108d8635b97dba3f69e04522198492d12623dbd8bf8dfc48d0a605509f7fd6859ba784c8d9e543995eae03617aa1969c183b11f086f39d9a01d") executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x3, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0) ioctl$CDROMREADAUDIO(r3, 0x5392, &(0x7f00000006c0)={@lba=0x1, 0x2, 0xffffffffffffffab, 0x0}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x0, @ioapic={0x100010000, 0x1, 0x0, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x1, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x3}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0xc, 0xc, 0x9, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xfe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0xff}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x6, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd}, {0x8, 0x81, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x81, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x86) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) write$binfmt_format(r1, &(0x7f0000000100)='0\x00', 0x2) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0'}, 0xb) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000ec0)=""/218, 0xda}], 0x1}, 0xcf}], 0x1, 0x100, 0x0) executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001300)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ppoll(&(0x7f0000001780)=[{r0, 0x2108}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f00000000c0)="0000000000005c88e9e7481696e29ce84cb5713ceb12ad473d30403a825427e1e51321df4add65c6e81bb725ed08c72771b0bf5cda44b85d95ea03a697f549012ff48f1bb49f163f04a411d3aa748ac3c607452ae921164b70aa9399e7e2fe15ed2eac0ff469ad6ad5d9cdf76207c1634f3eaa81a635084ad391d50000288f06c677a93430f660ec731b1abe3160b14a8d537bc2e4c1ee08209532f301c7cfc5c1bab8860e4c5136bef51c4e7289bdab602fda648f7932c4ed3f60864c3cc9710a82e34ca3c3cc7f6a131f69fde037e6bd75c723c142d50d6f248cb44cb170de6e2fd3e98cbd265695d420f136a1d73730dbde596ad3d9ae542813001d4300b5123f35687f766c47abea71086a4dc9f3d8b090273728c1d53996f91094e42fc133835277e8c6e8197fbac4a8ee58d34dd972d4be893f49dca5b99b6571410d00e33eaa650d6b8418389fdfbe014b1cf1427503f82849e3879ec960a948359a5eae9038b2b07cf6abcfa511715a3e", 0x16e) executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x80000, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="5b80010000000000140012800a000100767a63616e00000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) pipe2$9p(&(0x7f0000000040), 0x800) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r3, 0x400, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x300}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c710fa978939bf7640c25675e0000002d00010026bd7000fcdbdf25bb240b62b38e791bf06c4927a8ddddce7f8a9fc3f9a3fc294501fe5c87b6a1cc46baf876982cb99d87aa8b6c2530bec64bcd3286d993f12821e83b0bdd8e96d817c8a120a887d1003197f6bc461100000000df758a263a4a3fa1037e3022b6816531ee"], 0x1c}}, 0x20000000) (async, rerun: 64) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) (rerun: 64) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x24000880) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000fc0), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x34, r6, 0x431, 0x70bd2b, 0xffffffff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b80)={'ip6gre0\x00', &(0x7f0000000b00)={'ip6tnl0\x00', 0x0, 0x29, 0x4b, 0x5, 0x9, 0x4, @empty, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x700}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d40)={'syztnl2\x00', &(0x7f0000000bc0)={'gretap0\x00', 0x0, 0x8, 0x1, 0x1, 0xc, {{0x53, 0x4, 0x2, 0x1, 0x14c, 0x67, 0x0, 0x7, 0x2f, 0x0, @multicast1, @remote, {[@timestamp={0x44, 0x14, 0x64, 0x0, 0x7, [0xb2c, 0x2692, 0x9, 0x228]}, @cipso={0x86, 0x7e, 0xffffffffffffffff, [{0x7, 0xa, "b404150c669dc87b"}, {0x0, 0x4, "d1ad"}, {0x5, 0x12, "7a043ea81a38195c3172d0c6c7505eb0"}, {0x0, 0xe, "25dd8d205c1cbb361e98ef6a"}, {0x6, 0x12, "6063807c6ad56f959c3b9bb2c1f36823"}, {0x1, 0x12, "2b879c32c845dd3f752543c482bb2a69"}, {0x1, 0x3, 's'}, {0x2, 0xc, "262890ea3620ad3be029"}, {0x6, 0x10, "1b9df3c17138ba7ad10d6f9573a6"}, {0x0, 0x7, "70890a3191"}]}, @timestamp_addr={0x44, 0x1c, 0xa4, 0x1, 0x6, [{@empty, 0xe8}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x3}, {@broadcast, 0xf1}]}, @ssrr={0x89, 0x17, 0xa3, [@multicast1, @multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @timestamp_addr={0x44, 0xc, 0x1e, 0x1, 0xb, [{@loopback, 0x5b}]}, @timestamp_prespec={0x44, 0x2c, 0x92, 0x3, 0x1, [{@local, 0x10000}, {@remote, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x8}, 0x138600}, {@local, 0x21f}, {@empty, 0xfff}]}, @cipso={0x86, 0x38, 0x3, [{0x6, 0xb, "d58fa99fbfc4500ef1"}, {0x7, 0x7, "1797129b59"}, {0x2, 0x5, "130a12"}, {0x7, 0x2}, {0x0, 0xe, "447e8c0fffb3ba843ee0275e"}, {0xea2f6bfce174eb2e, 0xb, "c2787bc72466959842"}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000e80)={'syztnl0\x00', &(0x7f0000000d80)={'syztnl1\x00', 0x0, 0x80, 0x1, 0x1, 0x2, {{0x2a, 0x4, 0x2, 0x17, 0xa8, 0x0, 0x0, 0xa4, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@timestamp_addr={0x44, 0xc, 0xa2, 0x1, 0xd, [{@multicast2, 0x6}]}, @lsrr={0x83, 0x23, 0xa6, [@private=0xa010102, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x28}, @remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp_addr={0x44, 0x54, 0x98, 0x1, 0x4, [{@private=0xa010102, 0x80000000}, {@broadcast, 0x24}, {@loopback, 0x3}, {@private=0xa010100, 0x3}, {@private=0xa010101, 0x6}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@multicast2, 0x3522}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @ra={0x94, 0x4, 0x1}, @noop, @lsrr={0x83, 0x62, 0xb9, [@multicast2, @broadcast]}, @noop]}}}}}) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000f40)={'ip_vti0\x00', &(0x7f0000000ec0)={'syztnl2\x00', 0x0, 0x10, 0x10, 0x9, 0x5, {{0x10, 0x4, 0x1, 0x5, 0x40, 0x67, 0x0, 0x8, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x25}, {[@rr={0x7, 0x13, 0x6d, [@dev={0xac, 0x14, 0x14, 0x22}, @dev={0xac, 0x14, 0x14, 0x37}, @rand_addr=0x64010102, @rand_addr=0x64010101]}, @rr={0x7, 0x17, 0xdb, [@multicast1, @multicast1, @empty, @local, @dev={0xac, 0x14, 0x14, 0x15}]}, @end]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000f80)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001140)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001100)={&(0x7f0000001180)={0x130, r6, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x2f, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4004014}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r4, 0x303, 0x0, 0x25dfdbfb, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xdd}, [@call={0x85, 0x0, 0x0, 0xa6}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}]}, &(0x7f0000000400)='syzkaller\x00', 0x3, 0xc1, &(0x7f0000000440)=""/193, 0x40f00, 0x6a, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x1, 0x2, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r15, 0x0, 0x33, 0x58, &(0x7f00000006c0)="e612924c59942351d405a57fa20d173c42804c6391057a33c4fe834de64be09e5da71ba2e7b5c4039a91159049482af8c0757a", &(0x7f0000000700)=""/88, 0x7fffffff, 0x0, 0xde, 0xdc, &(0x7f0000000780)="f9399c3cca5fbcea5d4cf0018c26fe6ffb2f0aa046d9233ad2481ca08f5b7d7840112ac965c96c8a75649897e2f934faabe04fedf8e3586c5e8e29c36de7a03c1cf53de7e6f7c383b9742678cd82378ec8b499da8c8e9ec89939cce53cd64e586066b27653927ed3b54b8dbf3a0d76e738a0c61dcc649407e6f5a8e32ec56e743817a63076d3d0440f725ad9138d80134bfcf539c3e05b5b10e0560f2261e23448580fa39f5a0a34b9c7c8277bab51ecbb8b3983d066b495002de34a09fa9651de9c06cd47ba33a01b04f69060ac8436c9f5bf10e32dd977ee9bef433724", &(0x7f0000000880)="c30c7f46506d130d786faa7593b9e438a7b09cc8a81b3da794acdb60e29a323eceff12a46c26944d69b4d6a42f5c020325317ae9bccf1ae094a04b47f74fac7f66f48999f7b527cbebd347b07f4ebdcd18495912861788a4effd135a8ab30045a763d083cbacf0fbd0e4922a8140d310e36c21247a52a6e8dd1d5f4f8c7becb58259685eac7fb4b1cb9a02f7fafadbdeb36827d23397c023ee8c7c348d991a8c2c3c17bdcb359d0053f29b945bdb97962936b990f920c372235fd7c79a8de4b1a09b15fb34f500d1cfdd03b87eb9e2670d2d031ed54713e0951bde11", 0x3, 0x0, 0x6d}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r17 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r17, &(0x7f0000000040)={'#! ', './file0'}, 0xb) (async) close_range(r17, r17, 0x0) ioctl$KDSKBMETA(r17, 0x4b63, &(0x7f0000000a00)=0x3) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@getnexthop={0x4c, 0x6a, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, r16}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r16}, @NHA_FDB={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4050081}, 0x80) executing program 2: sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x14}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gro']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{}, 0x4}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xfa, 0xf2, 0x2, 0x20, @mcast2, @loopback, 0x80, 0x1, 0x38a, 0xf8}}) connect(r4, &(0x7f0000000280)=@xdp={0x2c, 0xe, r5, 0x12}, 0x80) (async) connect(r4, &(0x7f0000000280)=@xdp={0x2c, 0xe, r5, 0x12}, 0x80) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000500000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000000900010073797a30000000002c0004802800018008000100647570001c000280080002"], 0xc8}}, 0x0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000001600)={&(0x7f00000000c0)={0x2, 0x2, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0xd, 0x0, 0x8}]}}}], 0x18}, 0x8000) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000580)="914781cba1", 0xffe3}], 0x2}, 0x48800) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c72ffffffffff0400f60000070000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) executing program 2: prctl$PR_SET_SECUREBITS(0x1c, 0x1d) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) fcntl$setlease(r1, 0x400, 0x0) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000340)) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4811}, 0x2008c014) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) setresuid(0x0, r5, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000080)=0x40000) (async) write$dsp(r6, 0x0, 0xfffffe59) (async) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) (async) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x410202, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000180)=0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x439, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5}, @IFLA_GRE_OKEY={0x8, 0x5, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) sendto$packet(r0, &(0x7f0000000300)="31144fabdb8f3333", 0x8, 0x40, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @local}, 0x14) executing program 4: timer_create(0x2, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_gettime(0x0, &(0x7f0000000280)) (async) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x2, 0x4018831, 0xffffffffffffffff, 0x0) (async) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd448d1e7cbdaf3657d0f34e790c85bdba7931791f6d13318815e115000000000000000242f5b01bc4834608a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0x101000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'dt2817\x00', [0x9, 0x8, 0xfff, 0x1, 0x10, 0x0, 0x437b, 0xc, 0x5, 0x7, 0x749, 0x10001, 0x0, 0x6, 0xffffffff, 0xffffffff, 0x8, 0x81, 0x5, 0x0, 0x9, 0xe0ef, 0x9, 0xfffffc00, 0x8, 0x9132, 0x9, 0x60, 0x1ff, 0x2, 0x7fffffff]}) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r7, @ANYBLOB="01"], 0x20}}, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000440)={{{@in=@private, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) setresuid(r10, r11, 0x0) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1], 0x54}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0xffffffe5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x90) executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mdstat\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x8}, @TCA_PIE_TUPDATE={0x8}]}}]}, 0x40}}, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0xc0049364, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x20000002, 0x620400, 0x5, 0x9e, 0x0, 0x17}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r7, r5) flock(r5, 0x6) r8 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syslog(0xa, 0x0, 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r8) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) close_range(r3, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="61fe71b72b5f1780c202090386dd6000195800183afffe800000000000000000000000000018ff0200000000000000000000000000018800907849000000fc000000000000000000000000000001cfa2515290cc5079ea4b4a111d936ee5a31c47b2ee342a49333330edd4961ba1ba819adba82774223e8548443cf7709c971a6f66939b02411787683c46651dbe54a1a2ccf33fc58a478d2a23a26a0a5dfe83be26bdf9b92d9f18b4f1ce02bbf201835cb215976d8747f41db709"], 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000004ec0)={&(0x7f0000004e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004e80)={&(0x7f0000005600)={0xb8, 0x9, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0xc00c055}, 0x800) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) pselect6(0x40, &(0x7f0000000900)={0x6, 0x0, 0x1fc, 0x3, 0x5, 0x52a9396a, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x8, 0x7fff, 0x1, 0xc, 0xf, 0xe694, 0x3, 0x9}, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x125d, &(0x7f0000001080)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000ac0)={0x38, r8, 0x1, 0x0, 0x4, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}]}, 0x28}}, 0x4000) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r10, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r12, &(0x7f0000002700)=ANY=[@ANYBLOB="080008000701010005001400"], 0xfce) syz_init_net_socket$netrom(0x6, 0x5, 0x0) executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/89, 0x59}], 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x10010000004e20, 0x7}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000e00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="c1", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000), 0x4) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup(r2) connect$unix(r3, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e22}, 0x6e) write$UHID_INPUT(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaa0dffffffffffff88a8000081003d00080045be003c006300004906907800000000ffffffff0000000000000000000000000000000080004e2200004e2200000004000000020000000000000000"], 0x0) write$char_usb(r3, &(0x7f0000000040)="50e42a2e4dcfbbb0e59d6777b8e253922b7ca24e5265d09f8ea454e4b0ebdfacb7383e740d", 0x25) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000140), &(0x7f00000002c0)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800050100040000000000000a140000fe030001002d00001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async, rerun: 64) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (rerun: 64) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000180)={0x1}) (async) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000000)={0x1, 0x1}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000406010100000000050000000500010007000000"], 0x1c}}, 0x0) madvise(&(0x7f0000693000/0x4000)=nil, 0x4000, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00') (async, rerun: 32) r4 = socket$inet(0x2, 0x2, 0x1) (rerun: 32) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000200000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) (async, rerun: 64) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000200)=""/154, &(0x7f00000005c0)=0x9a) (async, rerun: 64) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r5 = socket$inet(0x2, 0x2, 0x1) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000000) (async, rerun: 64) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000200)="080016fbb07d586e", 0x20}], 0x1, 0x0, 0x0, 0x60000000}, 0x4000000) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000440)={0x0, 0x10000}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000004c0)={0x0, 0x1, 0x8, 0x0, 0x4, 0x2d2, 0x4, 0xc6e1, {r6, @in6={{0xa, 0x4e22, 0x4003, @mcast1, 0x3}}, 0xd, 0x4, 0x5, 0xf2, 0x6}}, &(0x7f0000000580)=0xb0) program did not crash replaying the whole log did not cause a kernel crash single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-syz_init_net_socket$802154_dgram-getsockopt$WPAN_WANTLQI-sendmsg$nl_route-openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP-socket$nl_netfilter-sendmsg$IPSET_CMD_FLUSH-madvise-ioctl$VFAT_IOCTL_READDIR_BOTH-unlinkat$binderfs_device-socket$inet-sendmsg$inet-getsockopt$IP_VS_SO_GET_SERVICES-syz_usb_connect-syz_open_dev$char_usb-socket$inet-recvmsg-sendmsg$inet-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_STATUS detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000140), &(0x7f00000002c0)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800050100040000000000000a140000fe030001002d00001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async, rerun: 64) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (rerun: 64) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000180)={0x1}) (async) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000000)={0x1, 0x1}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000406010100000000050000000500010007000000"], 0x1c}}, 0x0) madvise(&(0x7f0000693000/0x4000)=nil, 0x4000, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00') (async, rerun: 32) r4 = socket$inet(0x2, 0x2, 0x1) (rerun: 32) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000200000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) (async, rerun: 64) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000200)=""/154, &(0x7f00000005c0)=0x9a) (async, rerun: 64) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r5 = socket$inet(0x2, 0x2, 0x1) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000000) (async, rerun: 64) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000200)="080016fbb07d586e", 0x20}], 0x1, 0x0, 0x0, 0x60000000}, 0x4000000) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000440)={0x0, 0x10000}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000004c0)={0x0, 0x1, 0x8, 0x0, 0x4, 0x2d2, 0x4, 0xc6e1, {r6, @in6={{0xa, 0x4e22, 0x4003, @mcast1, 0x3}}, 0xd, 0x4, 0x5, 0xf2, 0x6}}, &(0x7f0000000580)=0xb0) program crashed: WARNING in __ww_mutex_wound single: successfully extracted reproducer found reproducer with 22 syscalls minimizing guilty program testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-syz_init_net_socket$802154_dgram-getsockopt$WPAN_WANTLQI-sendmsg$nl_route-openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP-socket$nl_netfilter-sendmsg$IPSET_CMD_FLUSH-madvise-ioctl$VFAT_IOCTL_READDIR_BOTH-unlinkat$binderfs_device-socket$inet-sendmsg$inet-getsockopt$IP_VS_SO_GET_SERVICES-syz_usb_connect-syz_open_dev$char_usb-socket$inet-recvmsg-sendmsg$inet-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000140), &(0x7f00000002c0)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800050100040000000000000a140000fe030001002d00001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async, rerun: 64) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (rerun: 64) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000180)={0x1}) (async) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000000)={0x1, 0x1}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000406010100000000050000000500010007000000"], 0x1c}}, 0x0) madvise(&(0x7f0000693000/0x4000)=nil, 0x4000, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00') (async, rerun: 32) r4 = socket$inet(0x2, 0x2, 0x1) (rerun: 32) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000200000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) (async, rerun: 64) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000200)=""/154, &(0x7f00000005c0)=0x9a) (async, rerun: 64) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r5 = socket$inet(0x2, 0x2, 0x1) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000000) (async, rerun: 64) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000200)="080016fbb07d586e", 0x20}], 0x1, 0x0, 0x0, 0x60000000}, 0x4000000) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000440)={0x0, 0x10000}, &(0x7f0000000480)=0x8) program crashed: WARNING in __ww_mutex_wound testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-syz_init_net_socket$802154_dgram-getsockopt$WPAN_WANTLQI-sendmsg$nl_route-openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP-socket$nl_netfilter-sendmsg$IPSET_CMD_FLUSH-madvise-ioctl$VFAT_IOCTL_READDIR_BOTH-unlinkat$binderfs_device-socket$inet-sendmsg$inet-getsockopt$IP_VS_SO_GET_SERVICES-syz_usb_connect-syz_open_dev$char_usb-socket$inet-recvmsg-sendmsg$inet detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000140), &(0x7f00000002c0)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800050100040000000000000a140000fe030001002d00001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async, rerun: 64) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (rerun: 64) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000180)={0x1}) (async) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000000)={0x1, 0x1}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000406010100000000050000000500010007000000"], 0x1c}}, 0x0) madvise(&(0x7f0000693000/0x4000)=nil, 0x4000, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00') (async, rerun: 32) r4 = socket$inet(0x2, 0x2, 0x1) (rerun: 32) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000200000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) (async, rerun: 64) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000200)=""/154, &(0x7f00000005c0)=0x9a) (async, rerun: 64) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r5 = socket$inet(0x2, 0x2, 0x1) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000000) (async, rerun: 64) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000200)="080016fbb07d586e", 0x20}], 0x1, 0x0, 0x0, 0x60000000}, 0x4000000) (async, rerun: 64) program crashed: WARNING in __ww_mutex_wound testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-syz_init_net_socket$802154_dgram-getsockopt$WPAN_WANTLQI-sendmsg$nl_route-openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP-socket$nl_netfilter-sendmsg$IPSET_CMD_FLUSH-madvise-ioctl$VFAT_IOCTL_READDIR_BOTH-unlinkat$binderfs_device-socket$inet-sendmsg$inet-getsockopt$IP_VS_SO_GET_SERVICES-syz_usb_connect-syz_open_dev$char_usb-socket$inet-recvmsg detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000140), &(0x7f00000002c0)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800050100040000000000000a140000fe030001002d00001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async, rerun: 64) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (rerun: 64) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000180)={0x1}) (async) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000000)={0x1, 0x1}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000406010100000000050000000500010007000000"], 0x1c}}, 0x0) madvise(&(0x7f0000693000/0x4000)=nil, 0x4000, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00') (async, rerun: 32) r4 = socket$inet(0x2, 0x2, 0x1) (rerun: 32) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000200000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) (async, rerun: 64) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000200)=""/154, &(0x7f00000005c0)=0x9a) (async, rerun: 64) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r5 = socket$inet(0x2, 0x2, 0x1) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000000) (async, rerun: 64) program crashed: WARNING in __ww_mutex_wound testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-syz_init_net_socket$802154_dgram-getsockopt$WPAN_WANTLQI-sendmsg$nl_route-openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP-socket$nl_netfilter-sendmsg$IPSET_CMD_FLUSH-madvise-ioctl$VFAT_IOCTL_READDIR_BOTH-unlinkat$binderfs_device-socket$inet-sendmsg$inet-getsockopt$IP_VS_SO_GET_SERVICES-syz_usb_connect-syz_open_dev$char_usb-socket$inet detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000140), &(0x7f00000002c0)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800050100040000000000000a140000fe030001002d00001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async, rerun: 64) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (rerun: 64) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000180)={0x1}) (async) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000000)={0x1, 0x1}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000406010100000000050000000500010007000000"], 0x1c}}, 0x0) madvise(&(0x7f0000693000/0x4000)=nil, 0x4000, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00') (async, rerun: 32) r4 = socket$inet(0x2, 0x2, 0x1) (rerun: 32) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000200000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) (async, rerun: 64) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000200)=""/154, &(0x7f00000005c0)=0x9a) (async, rerun: 64) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) socket$inet(0x2, 0x2, 0x1) program crashed: WARNING in __ww_mutex_wound testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-syz_init_net_socket$802154_dgram-getsockopt$WPAN_WANTLQI-sendmsg$nl_route-openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP-socket$nl_netfilter-sendmsg$IPSET_CMD_FLUSH-madvise-ioctl$VFAT_IOCTL_READDIR_BOTH-unlinkat$binderfs_device-socket$inet-sendmsg$inet-getsockopt$IP_VS_SO_GET_SERVICES-syz_usb_connect-syz_open_dev$char_usb detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000140), &(0x7f00000002c0)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800050100040000000000000a140000fe030001002d00001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async, rerun: 64) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (rerun: 64) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000180)={0x1}) (async) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000000)={0x1, 0x1}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000406010100000000050000000500010007000000"], 0x1c}}, 0x0) madvise(&(0x7f0000693000/0x4000)=nil, 0x4000, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00') (async, rerun: 32) r4 = socket$inet(0x2, 0x2, 0x1) (rerun: 32) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000200000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) (async, rerun: 64) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000200)=""/154, &(0x7f00000005c0)=0x9a) (async, rerun: 64) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) program crashed: WARNING in __ww_mutex_wound testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-syz_init_net_socket$802154_dgram-getsockopt$WPAN_WANTLQI-sendmsg$nl_route-openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP-socket$nl_netfilter-sendmsg$IPSET_CMD_FLUSH-madvise-ioctl$VFAT_IOCTL_READDIR_BOTH-unlinkat$binderfs_device-socket$inet-sendmsg$inet-getsockopt$IP_VS_SO_GET_SERVICES-syz_usb_connect detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000140), &(0x7f00000002c0)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800050100040000000000000a140000fe030001002d00001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async, rerun: 64) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (rerun: 64) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000180)={0x1}) (async) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000000)={0x1, 0x1}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000406010100000000050000000500010007000000"], 0x1c}}, 0x0) madvise(&(0x7f0000693000/0x4000)=nil, 0x4000, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00') (async, rerun: 32) r4 = socket$inet(0x2, 0x2, 0x1) (rerun: 32) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000200000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) (async, rerun: 64) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000200)=""/154, &(0x7f00000005c0)=0x9a) (async, rerun: 64) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) (async) program crashed: WARNING in __ww_mutex_wound testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-syz_init_net_socket$802154_dgram-getsockopt$WPAN_WANTLQI-sendmsg$nl_route-openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP-socket$nl_netfilter-sendmsg$IPSET_CMD_FLUSH-madvise-ioctl$VFAT_IOCTL_READDIR_BOTH-unlinkat$binderfs_device-socket$inet-sendmsg$inet-getsockopt$IP_VS_SO_GET_SERVICES detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000140), &(0x7f00000002c0)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800050100040000000000000a140000fe030001002d00001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async, rerun: 64) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (rerun: 64) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000180)={0x1}) (async) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000000)={0x1, 0x1}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000406010100000000050000000500010007000000"], 0x1c}}, 0x0) madvise(&(0x7f0000693000/0x4000)=nil, 0x4000, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00') (async, rerun: 32) r4 = socket$inet(0x2, 0x2, 0x1) (rerun: 32) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000200000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) (async, rerun: 64) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000200)=""/154, &(0x7f00000005c0)=0x9a) (async, rerun: 64) program crashed: WARNING in __ww_mutex_wound testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-syz_init_net_socket$802154_dgram-getsockopt$WPAN_WANTLQI-sendmsg$nl_route-openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP-socket$nl_netfilter-sendmsg$IPSET_CMD_FLUSH-madvise-ioctl$VFAT_IOCTL_READDIR_BOTH-unlinkat$binderfs_device-socket$inet-sendmsg$inet detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000140), &(0x7f00000002c0)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800050100040000000000000a140000fe030001002d00001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async, rerun: 64) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (rerun: 64) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000180)={0x1}) (async) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000000)={0x1, 0x1}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000406010100000000050000000500010007000000"], 0x1c}}, 0x0) madvise(&(0x7f0000693000/0x4000)=nil, 0x4000, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00') (async, rerun: 32) r4 = socket$inet(0x2, 0x2, 0x1) (rerun: 32) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000200000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) (async, rerun: 64) program crashed: WARNING in __ww_mutex_wound testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-syz_init_net_socket$802154_dgram-getsockopt$WPAN_WANTLQI-sendmsg$nl_route-openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP-socket$nl_netfilter-sendmsg$IPSET_CMD_FLUSH-madvise-ioctl$VFAT_IOCTL_READDIR_BOTH-unlinkat$binderfs_device-socket$inet detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000140), &(0x7f00000002c0)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800050100040000000000000a140000fe030001002d00001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async, rerun: 64) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (rerun: 64) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000180)={0x1}) (async) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000000)={0x1, 0x1}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000406010100000000050000000500010007000000"], 0x1c}}, 0x0) madvise(&(0x7f0000693000/0x4000)=nil, 0x4000, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00') (async, rerun: 32) socket$inet(0x2, 0x2, 0x1) (rerun: 32) program crashed: WARNING in __ww_mutex_wound testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-syz_init_net_socket$802154_dgram-getsockopt$WPAN_WANTLQI-sendmsg$nl_route-openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP-socket$nl_netfilter-sendmsg$IPSET_CMD_FLUSH-madvise-ioctl$VFAT_IOCTL_READDIR_BOTH-unlinkat$binderfs_device detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000140), &(0x7f00000002c0)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800050100040000000000000a140000fe030001002d00001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async, rerun: 64) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (rerun: 64) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000180)={0x1}) (async) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000000)={0x1, 0x1}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000406010100000000050000000500010007000000"], 0x1c}}, 0x0) madvise(&(0x7f0000693000/0x4000)=nil, 0x4000, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00') (async, rerun: 32) program crashed: WARNING in __ww_mutex_wound testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-syz_init_net_socket$802154_dgram-getsockopt$WPAN_WANTLQI-sendmsg$nl_route-openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP-socket$nl_netfilter-sendmsg$IPSET_CMD_FLUSH-madvise-ioctl$VFAT_IOCTL_READDIR_BOTH detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000140), &(0x7f00000002c0)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800050100040000000000000a140000fe030001002d00001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async, rerun: 64) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (rerun: 64) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000180)={0x1}) (async) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000000)={0x1, 0x1}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000406010100000000050000000500010007000000"], 0x1c}}, 0x0) madvise(&(0x7f0000693000/0x4000)=nil, 0x4000, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) program crashed: WARNING in __ww_mutex_wound testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-syz_init_net_socket$802154_dgram-getsockopt$WPAN_WANTLQI-sendmsg$nl_route-openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP-socket$nl_netfilter-sendmsg$IPSET_CMD_FLUSH-madvise detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000140), &(0x7f00000002c0)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800050100040000000000000a140000fe030001002d00001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async, rerun: 64) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (rerun: 64) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000180)={0x1}) (async) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000000)={0x1, 0x1}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000406010100000000050000000500010007000000"], 0x1c}}, 0x0) madvise(&(0x7f0000693000/0x4000)=nil, 0x4000, 0x0) (async) program crashed: WARNING in __ww_mutex_wound testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-syz_init_net_socket$802154_dgram-getsockopt$WPAN_WANTLQI-sendmsg$nl_route-openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP-socket$nl_netfilter-sendmsg$IPSET_CMD_FLUSH detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000140), &(0x7f00000002c0)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800050100040000000000000a140000fe030001002d00001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async, rerun: 64) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (rerun: 64) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000180)={0x1}) (async) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000000)={0x1, 0x1}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000406010100000000050000000500010007000000"], 0x1c}}, 0x0) program crashed: WARNING in __ww_mutex_wound testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-syz_init_net_socket$802154_dgram-getsockopt$WPAN_WANTLQI-sendmsg$nl_route-openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP-socket$nl_netfilter detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000140), &(0x7f00000002c0)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800050100040000000000000a140000fe030001002d00001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async, rerun: 64) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (rerun: 64) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000180)={0x1}) (async) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000000)={0x1, 0x1}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) program crashed: WARNING in __ww_mutex_wound testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-syz_init_net_socket$802154_dgram-getsockopt$WPAN_WANTLQI-sendmsg$nl_route-openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000140), &(0x7f00000002c0)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800050100040000000000000a140000fe030001002d00001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async, rerun: 64) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (rerun: 64) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000180)={0x1}) (async) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000000)={0x1, 0x1}) (async) program crashed: WARNING in __ww_mutex_wound testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-syz_init_net_socket$802154_dgram-getsockopt$WPAN_WANTLQI-sendmsg$nl_route-openat$fb1-ioctl$FBIOPUT_CON2FBMAP detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000140), &(0x7f00000002c0)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800050100040000000000000a140000fe030001002d00001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async, rerun: 64) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (rerun: 64) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000180)={0x1}) (async) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-syz_init_net_socket$802154_dgram-getsockopt$WPAN_WANTLQI-sendmsg$nl_route-openat$fb1-ioctl$FBIOPUT_CON2FBMAP detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000140), &(0x7f00000002c0)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800050100040000000000000a140000fe030001002d00001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async, rerun: 64) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (rerun: 64) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000000)={0x1, 0x1}) (async) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-syz_init_net_socket$802154_dgram-getsockopt$WPAN_WANTLQI-sendmsg$nl_route-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000140), &(0x7f00000002c0)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800050100040000000000000a140000fe030001002d00001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async, rerun: 64) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000180)={0x1}) (async) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x1, 0x1}) (async) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-syz_init_net_socket$802154_dgram-getsockopt$WPAN_WANTLQI-openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000140), &(0x7f00000002c0)=0x4) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (rerun: 64) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000180)={0x1}) (async) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000000)={0x1, 0x1}) (async) program crashed: WARNING in __ww_mutex_wound testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-syz_init_net_socket$802154_dgram-openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (rerun: 64) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000180)={0x1}) (async) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x1, 0x1}) (async) program crashed: WARNING in __ww_mutex_wound testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (rerun: 64) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000180)={0x1}) (async) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x1, 0x1}) (async) program crashed: WARNING in __ww_mutex_wound testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP detailed listing: executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (rerun: 64) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000180)={0x1}) (async) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x1, 0x1}) (async) program crashed: WARNING in __ww_mutex_wound testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP detailed listing: executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000180)={0x1}) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x1, 0x1}) program crashed: WARNING in __ww_mutex_wound testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP detailed listing: executing program 0: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000180)={0x1}) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x1, 0x1}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP detailed listing: executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x1, 0x1}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP detailed listing: executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000180)={0x1}) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP program crashed: WARNING in __ww_mutex_wound simplifying C reproducer testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP program crashed: WARNING in __ww_mutex_wound testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP program crashed: WARNING in __ww_mutex_wound testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP program crashed: WARNING in __ww_mutex_wound testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP program crashed: WARNING in __ww_mutex_wound testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP program crashed: WARNING in __ww_mutex_wound testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP program crashed: WARNING in __ww_mutex_wound testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP program crashed: WARNING in __ww_mutex_wound testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP detailed listing: executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000180)={0x1}) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x1, 0x1}) program crashed: WARNING in __ww_mutex_wound validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP detailed listing: executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000180)={0x1}) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x1, 0x1}) program crashed: WARNING in __ww_mutex_wound validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fb1-ioctl$FBIOPUT_CON2FBMAP-ioctl$FBIOPUT_CON2FBMAP detailed listing: executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000180)={0x1}) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x1, 0x1}) program crashed: WARNING in __ww_mutex_wound validation run: crashed=true reproducing took 5h46m16.527573837s repro crashed as (corrupted=false): ------------[ cut here ]------------ WARNING: CPU: 3 PID: 6436 at ./include/linux/sched.h:2185 __clear_task_blocked_on include/linux/sched.h:2185 [inline] WARNING: CPU: 3 PID: 6436 at ./include/linux/sched.h:2185 __ww_mutex_wound+0x23b/0x3e0 kernel/locking/ww_mutex.h:346 Modules linked in: CPU: 3 UID: 0 PID: 6436 Comm: syz.0.240 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:__clear_task_blocked_on include/linux/sched.h:2185 [inline] RIP: 0010:__ww_mutex_wound+0x23b/0x3e0 kernel/locking/ww_mutex.h:346 Code: 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c 02 00 0f 85 85 01 00 00 48 8b 81 78 0a 00 00 48 85 c0 74 09 48 39 c3 74 04 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c RSP: 0018:ffffc90003aaf298 EFLAGS: 00010083 RAX: ffff8881055ec048 RBX: ffff8880265c0068 RCX: ffff88801e2ea440 RDX: 1ffff11003c5d5d7 RSI: ffffffff8de2752d RDI: ffffffff8c15fb80 RBP: ffff88801e2eaeb8 R08: 0000000000000000 R09: ffffed1004cb800d R10: ffff8880265c006f R11: 0000000000000000 R12: ffffc9000062fa30 R13: 0000000000000001 R14: 0000000000000007 R15: ffffc90003aaf390 FS: 00005555696e0500(0000) GS:ffff8880d69c8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b31c5ffff CR3: 0000000025744000 CR4: 0000000000352ef0 Call Trace: __ww_mutex_add_waiter kernel/locking/ww_mutex.h:574 [inline] __mutex_lock_common kernel/locking/mutex.c:638 [inline] __ww_mutex_lock.constprop.0+0x1a69/0x32c0 kernel/locking/mutex.c:767 ww_mutex_lock+0x37/0x160 kernel/locking/mutex.c:885 modeset_lock+0x4a0/0x6e0 drivers/gpu/drm/drm_modeset_lock.c:316 drm_modeset_lock drivers/gpu/drm/drm_modeset_lock.c:398 [inline] drm_modeset_lock+0x59/0x90 drivers/gpu/drm/drm_modeset_lock.c:394 drm_atomic_get_crtc_state+0x100/0x450 drivers/gpu/drm/drm_atomic.c:356 drm_atomic_get_plane_state+0x436/0x590 drivers/gpu/drm/drm_atomic.c:561 drm_client_modeset_commit_atomic+0x237/0x7e0 drivers/gpu/drm/drm_client_modeset.c:1055 drm_client_modeset_commit_locked+0x14d/0x580 drivers/gpu/drm/drm_client_modeset.c:1206 pan_display_atomic drivers/gpu/drm/drm_fb_helper.c:1388 [inline] drm_fb_helper_pan_display+0x32d/0xa40 drivers/gpu/drm/drm_fb_helper.c:1448 fb_pan_display+0x479/0x7d0 drivers/video/fbdev/core/fbmem.c:193 bit_update_start+0x49/0x1f0 drivers/video/fbdev/core/bitblit.c:380 fbcon_switch+0xbf5/0x14c0 drivers/video/fbdev/core/fbcon.c:2193 redraw_screen+0x2c1/0x760 drivers/tty/vt/vt.c:965 fbcon_set_disp+0x7d4/0xe40 drivers/video/fbdev/core/fbcon.c:1419 con2fb_init_display drivers/video/fbdev/core/fbcon.c:817 [inline] set_con2fb_map+0x703/0x1060 drivers/video/fbdev/core/fbcon.c:890 fbcon_set_con2fb_map_ioctl+0x16c/0x220 drivers/video/fbdev/core/fbcon.c:3119 do_fb_ioctl+0x328/0x7e0 drivers/video/fbdev/core/fb_chrdev.c:138 fb_ioctl+0xe5/0x150 drivers/video/fbdev/core/fb_chrdev.c:169 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:598 [inline] __se_sys_ioctl fs/ioctl.c:584 [inline] __x64_sys_ioctl+0x18b/0x210 fs/ioctl.c:584 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3fcdb8eb69 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffee33a1a78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f3fcddb5fa0 RCX: 00007f3fcdb8eb69 RDX: 0000200000000000 RSI: 0000000000004610 RDI: 0000000000000003 RBP: 00007f3fcdc11df1 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f3fcddb5fa0 R14: 00007f3fcddb5fa0 R15: 0000000000000003 final repro crashed as (corrupted=false): ------------[ cut here ]------------ WARNING: CPU: 3 PID: 6436 at ./include/linux/sched.h:2185 __clear_task_blocked_on include/linux/sched.h:2185 [inline] WARNING: CPU: 3 PID: 6436 at ./include/linux/sched.h:2185 __ww_mutex_wound+0x23b/0x3e0 kernel/locking/ww_mutex.h:346 Modules linked in: CPU: 3 UID: 0 PID: 6436 Comm: syz.0.240 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:__clear_task_blocked_on include/linux/sched.h:2185 [inline] RIP: 0010:__ww_mutex_wound+0x23b/0x3e0 kernel/locking/ww_mutex.h:346 Code: 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c 02 00 0f 85 85 01 00 00 48 8b 81 78 0a 00 00 48 85 c0 74 09 48 39 c3 74 04 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c RSP: 0018:ffffc90003aaf298 EFLAGS: 00010083 RAX: ffff8881055ec048 RBX: ffff8880265c0068 RCX: ffff88801e2ea440 RDX: 1ffff11003c5d5d7 RSI: ffffffff8de2752d RDI: ffffffff8c15fb80 RBP: ffff88801e2eaeb8 R08: 0000000000000000 R09: ffffed1004cb800d R10: ffff8880265c006f R11: 0000000000000000 R12: ffffc9000062fa30 R13: 0000000000000001 R14: 0000000000000007 R15: ffffc90003aaf390 FS: 00005555696e0500(0000) GS:ffff8880d69c8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b31c5ffff CR3: 0000000025744000 CR4: 0000000000352ef0 Call Trace: __ww_mutex_add_waiter kernel/locking/ww_mutex.h:574 [inline] __mutex_lock_common kernel/locking/mutex.c:638 [inline] __ww_mutex_lock.constprop.0+0x1a69/0x32c0 kernel/locking/mutex.c:767 ww_mutex_lock+0x37/0x160 kernel/locking/mutex.c:885 modeset_lock+0x4a0/0x6e0 drivers/gpu/drm/drm_modeset_lock.c:316 drm_modeset_lock drivers/gpu/drm/drm_modeset_lock.c:398 [inline] drm_modeset_lock+0x59/0x90 drivers/gpu/drm/drm_modeset_lock.c:394 drm_atomic_get_crtc_state+0x100/0x450 drivers/gpu/drm/drm_atomic.c:356 drm_atomic_get_plane_state+0x436/0x590 drivers/gpu/drm/drm_atomic.c:561 drm_client_modeset_commit_atomic+0x237/0x7e0 drivers/gpu/drm/drm_client_modeset.c:1055 drm_client_modeset_commit_locked+0x14d/0x580 drivers/gpu/drm/drm_client_modeset.c:1206 pan_display_atomic drivers/gpu/drm/drm_fb_helper.c:1388 [inline] drm_fb_helper_pan_display+0x32d/0xa40 drivers/gpu/drm/drm_fb_helper.c:1448 fb_pan_display+0x479/0x7d0 drivers/video/fbdev/core/fbmem.c:193 bit_update_start+0x49/0x1f0 drivers/video/fbdev/core/bitblit.c:380 fbcon_switch+0xbf5/0x14c0 drivers/video/fbdev/core/fbcon.c:2193 redraw_screen+0x2c1/0x760 drivers/tty/vt/vt.c:965 fbcon_set_disp+0x7d4/0xe40 drivers/video/fbdev/core/fbcon.c:1419 con2fb_init_display drivers/video/fbdev/core/fbcon.c:817 [inline] set_con2fb_map+0x703/0x1060 drivers/video/fbdev/core/fbcon.c:890 fbcon_set_con2fb_map_ioctl+0x16c/0x220 drivers/video/fbdev/core/fbcon.c:3119 do_fb_ioctl+0x328/0x7e0 drivers/video/fbdev/core/fb_chrdev.c:138 fb_ioctl+0xe5/0x150 drivers/video/fbdev/core/fb_chrdev.c:169 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:598 [inline] __se_sys_ioctl fs/ioctl.c:584 [inline] __x64_sys_ioctl+0x18b/0x210 fs/ioctl.c:584 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3fcdb8eb69 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffee33a1a78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f3fcddb5fa0 RCX: 00007f3fcdb8eb69 RDX: 0000200000000000 RSI: 0000000000004610 RDI: 0000000000000003 RBP: 00007f3fcdc11df1 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f3fcddb5fa0 R14: 00007f3fcddb5fa0 R15: 0000000000000003