Extracting prog: 5m0.00786022s
Minimizing prog: 30m3.772033779s
Simplifying prog options: 0s
Extracting C: 1m18.708668163s
Simplifying C: 11m51.510113304s


extracting reproducer from 24 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-chdir-openat$cgroup_ro-symlinkat-name_to_handle_at-open_by_handle_at-write$FUSE_BMAP
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x2200040, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') (fail_nth: 7)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x1000)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)
write$FUSE_BMAP(r0, &(0x7f00000028c0)={0x18, 0xfffffffffffffff5, 0x0, {0x6}}, 0x18)

program did not crash
single: failed to extract reproducer
bisect: bisecting 24 programs with base timeout 30s
testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 6, 19, 30, 16, 27, 24, 15, 25, 18, 16, 19, 18, 22, 10, 24, 22, 12, 4, 30, 11, 30, 30, 8]
detailed listing:
executing program 2:
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f00000002c0)=@ethtool_coalesce={0xf, 0x1, 0x87aa, 0x2, 0x6, 0x1000, 0x3, 0x0, 0xfffffffc, 0x1, 0x5, 0x6, 0xf, 0x8001, 0x3, 0x40, 0x3, 0x3, 0x1, 0xc79, 0x2, 0x3, 0x2}})
r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0x8001, 0x4, 0x7fff, 0x9, 0x8001, 0x6, 0x40, 0x80, 0x0, 0xeba9, 0x200, 0x80}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010326bd7000fbdbdf252d00000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x20000091}, 0x40006)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x1000000000000c)
executing program 2:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x2000008, 0x110, r0, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000c00)=ANY=[], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
executing program 3:
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[], 0x94}}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x9}, 0x1)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180), &(0x7f0000000200)=0x8)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f0167790200"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = socket(0x2, 0x3, 0xff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x59}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x8090)
sendmmsg$inet(r2, &(0x7f00000033c0)=[{{&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000180)="7a36bdd84600c9f3aeab32325c081c41d29fb9a92314360f", 0x18}, {&(0x7f00000001c0)="bd91724f1c0b05911d4a2e6cc1fe9a42", 0x10}], 0x2}}], 0x1, 0x0)
syz_usb_control_io$uac3(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03"], 0x0)
executing program 0:
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0xb7, &(0x7f00000001c0)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect$uac2(0x6, 0x12b, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x119, 0x3, 0x1, 0xd, 0x20, 0x6, {0x8, 0xb, 0x2, 0x1, 0x1, 0x6, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x8, 0x3d, 0x4}, [@processing_unit={0xd, 0x24, 0x8, 0x5, 0x4, [0x2, 0x1, 0x1, 0x3]}, @input_terminal={0x10, 0x24, 0x2, 0x5, 0x100, 0x3, 0x3, 0xd, 0x85a6, 0x10, 0x9, 0xbe}, @multiply_unit={0x7, 0x24, 0xc, 0x5, 0x5, 0xf8, 0x5}, @input_terminal={0x10, 0x24, 0x2, 0x2, 0x202, 0x6, 0xf7, 0x0, 0x5, 0xfe, 0x5, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7, 0xf, 0x9, "c1b77c7a85"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x0, 0x18, 0xd, 0x3}, @as_header={0x10, 0x24, 0x1, 0x8, 0x5, 0x1, 0x0, 0x6, 0x8, 0xb}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x4, 0x3, 0x2, "839bce15f2ce0c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xff, 0x2, 0x3, {0x8, 0x25, 0x1, 0x2, 0x6, 0x5, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xfffc, 0x46a6, 0x9, "c81d5d2df24e"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x2, 0xfff8, 0x1, '\''}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x8}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x1, 0x1, 0xe, 0x10, "dde11c38d078"}, @as_header={0x10, 0x24, 0x1, 0x5, 0x6, 0x3, 0x1001, 0xf8, 0xe35, 0x3}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x6, 0x100, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x9, 0x6, {0x8, 0x25, 0x1, 0x82, 0xf, 0xa, 0x6}}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x200, 0x0, 0x2, 0x81, 0x20, 0x9}, 0x5c, &(0x7f0000000740)=ANY=[@ANYBLOB="050f5c00060b10010c470003080900051b1002169c77da9a72d1adc7e305424a94b0cfc361b8f125973a4120100a06c500000000f0040000000000f0ff00000fff00000000ff07b02000000b1001025000000701000403100b03100b"], 0x2, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x140c}}]})
syz_usb_control_io$uac2(r2, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x20, 0xa, 0xf3, {0xf3, 0x4, "32f8fc02ac068d6d15783266369778c2c8925989df384aca0b6ff2e3fef56af2033be8132e9e9f2ed087e8a92eebe2e945a34acb84c5933ef6eb2a87fecdc3975d11c42aa72e0561690750a52bf63a6f59ec3bf23d585deba95da015305229c6ae0cc7548c69204f5616b4e3452f3f936e2f8934dd2729fad6b431ca6675d95073d3a9fc11e0653aa676f480bbee5eda569c83b2defd9363ab44f5b7d2438653572aae4b11592bb4cdaf0a2550e52de73c26de31ffb421371bcbb4be3b5517135b10278d747c5568664981f138f4ff9e21145206dcbebb435af82c9c5e566621caeed7dedc159869fd3c33b0b6a994cc8f"}}, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000dc0)={0x44, &(0x7f0000000ac0)={0x40, 0x8, 0xd5, "11e3bc0775c086e2b1ab9b85181a65468aa81be0cc30091f440aca41afec9f32339b21079e7bc82ad6499191c7da7da84b80157bd067f759d167a162c7900cdff731ff30c2a8fa61834ee47b853524fac102a9db1346ea9345beb235ec8f23958f0831d692a83957141c4de86e3273a593dff2b5162bb8ffdbe26b0e0b88c3aa72b769be8b2dbae1f6849cc6e413a63574a230a2d2b5012ecd6820dfc3af4733e60d0334c23e347a6b5543967ca4491f44c5e78933c5279f5dd1095527787cecf5a193b7a646ce560d361df639aa67164059e7c05f"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c40)={0x20, 0x81, 0x2, '`E'}, &(0x7f0000000c80)={0x20, 0x82, 0x3, "53c683"}, &(0x7f0000000cc0)={0x20, 0x83, 0x1, "cf"}, &(0x7f0000000d00)={0x20, 0x84, 0x2, "b029"}, &(0x7f0000000d40)={0x20, 0x85, 0x3, "e05693"}})
syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x80a, 0x9, 0x4, 0x7, 0x5, 0x401, 0x7, 0x7fffffff, 0x14, 0x9, 0x7e4, 0x2}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac3(0x5, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x16, &(0x7f0000000400)=@string={0x16, 0x3, "6264e701664c67a5954e71f7420b64d0f1dba41a"}}]})
syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200f14"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="400cf202"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00')
preadv(r3, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, 0x6c, 0x0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
setns(0xc9, 0x0)
r5 = socket(0x1f, 0x3, 0x1)
bind(r5, &(0x7f0000000300)=@hci={0x1f, 0xffff, 0x3}, 0x6)
write(r5, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17)
syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0x1}, {0x0, "ffffffffffffffff"}}}}, 0xf)
nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0)
setns(0xc9, 0x0)
r6 = socket(0x1f, 0x5, 0x8)
setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000700)={0x0, 0x3e8}, 0x10)
bind(r6, &(0x7f0000000800)=@generic={0x1f, "0000000000000100"}, 0xa)
connect(r6, &(0x7f0000000900)=@generic={0x1f, "0102030405060100"}, 0xa)
nanosleep(&(0x7f0000000a00)={0x0, 0x5f5e100}, 0x0)
syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="000001080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ptrace(0x10, r0)
exit(0x7)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x800000, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x801000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x80)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3b)
ioctl$KVM_CAP_MEMORY_FAULT_INFO(r2, 0x4068aea3, &(0x7f00000005c0))
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0xd2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000001c0)={"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"})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x1, 0x3, 0x8000, 0x1000, &(0x7f0000ff5000/0x1000)=nil})
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000001040)={0x9b, {"a2e3ad0e090d07f91b5e1a1887f70706d038e7ff7fc6e5539b0d3e0a8b089b3f32356c030890e0879b0a4cc6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07732f0acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973725b36d5b1b7ddd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fde70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe090064f11e4fe852c3f7c4239963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632bcfaaa5ae6c07a236d9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79ca389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e55fc4a41ea4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c46bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eb0600f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180610117a13638e9a14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae0036327bd1f4108b7807fb33b72685ec37a2d3f766413a60459516247e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7d78aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e9fbfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c675879c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885594ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xffffffffffffff68}}, 0x1006)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
executing program 2:
mount(&(0x7f0000000100)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000140)='nsfs\x00', 0x208010, 0x0)
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
pipe2(&(0x7f0000000400), 0x80000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = creat(&(0x7f0000000040)='\x00', 0xa5)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = userfaultfd(0x1)
ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f00000002c0)={0x34, "b50e0abe4810f647535d34686d9c21fe050dd5e7a77401f2e077de6db56b8bee1f17d29bdfc17585cd4648ffc5580d9ac1296dc0090586ca2c886bcf1afe5db364b6e500a83dd1cead641d9eca2422bfeacfe6565f7cbe060b5a5510f4ebb62c02c7cda186b64ee5102435659355080e4555f8c8a97b2a30ead3a1d2144d11cd"})
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x652})
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', <r4=>0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r2)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2cb4cd53fa41990c37f3fb5c3eec2c04f09b936b51", @ANYRES16=r5, @ANYBLOB="0100fcffffff000000001800000008000300", @ANYRES32=r4, @ANYBLOB="100030800c0001800800010001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4)
write(r1, &(0x7f0000000080)="c8a4c8a6b8bacc3f6803aecc80243ccdd21f295bfe598918d6d7c81050cb9afd56568b32ffb401c1bf5122fc1e7b45", 0x2f)
executing program 1:
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
setns(0xc9, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
write(r3, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x1c, 0x21, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x01\x01b'}]}, 0x1c}], 0x1}, 0x800)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0010000, 0xec000000, 0xcd}]})
write$P9_RSTATFS(r0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x9, 0x1}, 0x8)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file2\x00', 0x40, 0x23)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$IOMMU_IOAS_IOVA_RANGES(r6, 0x3b84, &(0x7f0000000b40)={0x20, 0x0, 0x0, 0x0, 0x0})
r7 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x8000000, 0x2, 0x0, 0x4, 0x7, 0x6}, 0x20)
getresuid(&(0x7f0000000340)=<r8=>0x0, &(0x7f0000000380), &(0x7f00000003c0))
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000200)='./file0/file2\x00', &(0x7f0000000240), 0x20206e, &(0x7f0000000400)={'trans=virtio,', {[{@privport}, {@fscache}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@uname={'uname', 0x3d, '^]-('}}, {@version_9p2000}, {@access_client}, {@cache_loose}, {@fscache}], [{@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@seclabel}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x66, 0x34, 0x63, 0x32, 0x34, 0x36, 0x34], 0x2d, [0x66, 0x66, 0x3e, 0x38], 0x2d, [0x56, 0x61, 0x33, 0x62], 0x2d, [0x31, 0x36, 0x32, 0x35], 0x2d, [0x37, 0x63, 0x65, 0x65, 0x66, 0x39, 0x37, 0x36]}}}, {@pcr={'pcr', 0x3d, 0x2b}}, {@uid_lt={'uid<', r8}}]}})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x60, 0x4, 0x4, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7c, 0x76, 0x1, 0x0, 0x0, 0x8, 0x10, 0xc, 0xff, 0x0, '\x00', 0x0, 0x7f})
open_by_handle_at(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000f8"], 0x0)
executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) (async, rerun: 32)
mount(0x0, &(0x7f00000006c0)='./proc/thread-self/fail-nth\x00', &(0x7f0000000340)='9p\x00', 0x0, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='7', 0x1) (async)
write$binfmt_elf64(r1, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f00000004c0)={[0x6]}, 0x8, 0x800)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x109200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002"], 0xec}}, 0x0)
ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)=@vmx={0x105, 0x0, 0x2080, {0xffffffffffffffff, 0xffffffffffffffff, {}, 0x0, 0xb}}) (async, rerun: 64)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/62, 0x3e}, {&(0x7f0000000400)=""/177, 0xb1}, {&(0x7f0000003440)=""/4137, 0x1029}, {&(0x7f0000000580)=""/153, 0x99}, {&(0x7f0000000140)=""/186, 0xba}, {&(0x7f0000000200)=""/174, 0xae}, {&(0x7f00000004c0)=""/180, 0xb4}, {&(0x7f0000000000)=""/19, 0x13}, {&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000640)=""/104, 0x68}], 0xa}, 0x0) (rerun: 64)
executing program 1:
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000009010100000000000000000000000010000480"], 0x58}}, 0x0)
ioctl$OCFS2_IOC_RESVSP64(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000)={0x1, 0x2, 0x4, 0x402, 0x9, 0x3})
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x40030000000000, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x2, 0x10, 0xcf, 0x5, 0xa, 0x0, 0x70bd29, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x6e6bb8, 0x3, {0x6, 0x32, 0x2, 0x7, 0x0, 0xe, 0x0, @in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}}}]}, 0x50}}, 0x840)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000540)=0x550, 0x4)
setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x6, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x20000080, &(0x7f0000006080)={0xa, 0x4e1f, 0x80000004, @loopback, 0x55}, 0x1c)
recvmsg(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x2141)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10)
recvfrom$phonet(r4, &(0x7f00000002c0)=""/16, 0x10, 0x120, &(0x7f0000000340)={0x23, 0xa, 0xa, 0x28}, 0x10)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000200)='pids.events\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x8000060000000001})
write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0)
preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1)
r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
executing program 1:
openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) (async)
r1 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102)
fcntl$dupfd(r1, 0x0, r1) (async)
r2 = fcntl$dupfd(r1, 0x0, r1)
readv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1)
write$snddsp(r2, &(0x7f0000000340)="87ecc00c05dbb58b776f34f9b779d998d21e0e3353174bb169f81d1590532836dee3667c58e173cdd67b", 0x2a) (async)
write$snddsp(r2, &(0x7f0000000340)="87ecc00c05dbb58b776f34f9b779d998d21e0e3353174bb169f81d1590532836dee3667c58e173cdd67b", 0x2a)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000040)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0}, 0x4008004)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x80000000, 0x4002004c4, 0x1004, 0x8000000000000000, 0x7ff, 0x19a3, 0x0, 0x9, 0x1, 0x6126, 0x8d], 0x30000, 0x2010d3})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
executing program 3:
ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f00000001c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='md0', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0), 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/block/md0/md/raid_disks\x00', 0x101042, 0xbe)
write(r2, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='1:1\n', 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='writemostly\n', 0xc)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/component_size\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='1', 0x1)
executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e9ecdcb0a336629600000000000000002001040000004b00000000000000000064010102000000000000000000000000000000050000000302002000000000f2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000040a00000000000000000000008040000000000000000008000000000000000001000003000000004400050000000000000000000000000000000000000004d23c0000000a000000ffffffff00000000000000000000000000000000000308"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0)
r2 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x7, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)="610f05", 0x3}], 0x1}, 0x240280d1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="9800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac14141608000740000000050800048004000380080008"], 0x98}}, 0x4004000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x1)
fchdir(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r6, &(0x7f00000001c0)=""/44, 0x2c)
getdents64(r6, 0xfffffffffffffffe, 0x29)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x40010060)
remap_file_pages(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x40)
executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000980)})
ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0xbb8}, 0x1, 0x0, 0x0, 0x800}, 0x20000040)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000080)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5baf80c66b80e5ca48f66efbafc0cec0f01310f019c09000f01c2", 0x71}], 0x1, 0x7d, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})
setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000140)=0xfffffff7, 0x4)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) (async)
r0 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff0007058102"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x42, 0x1ff) (async, rerun: 64)
r2 = syz_open_dev$I2C(&(0x7f00000007c0), 0x2, 0x2002)
ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000840)={0x1, 0x54, 0x3, &(0x7f0000000800)={0x12, "c5662b04de30eabc3eee1dc332fe6e9c9483cc8c45b9cd20646cc4b8fb0ea1735f"}}) (async)
write(r1, &(0x7f00000005c0)="000102030405060708090a0b0c", 0xd) (async)
r3 = socket$packet(0x11, 0x3, 0x300) (async)
socket$inet6(0xa, 0x3, 0xff) (async)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0)
syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f00000002c0)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="20161100000001"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'tunl0\x00', <r5=>0x0})
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000780)={0x4, r6}, 0x0)
sendto$packet(r3, &(0x7f00000002c0)="0503", 0x2, 0x4004015, &(0x7f0000000140)={0x11, 0x7, r5}, 0x14)
r7 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r8 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r7)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r8, 0x300}, &(0x7f0000000840)=ANY=[], 0x0, 0x0) (async)
add_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000180)="b3d3cd08ee8e2a02fdd66ce7113785087936f46647e611796a6b84ee374892792885eeeea31a9bc89410a194df15e3e4d850fe891461f0fb0d5ec68666ffdb8cbb0ad1f0720252d7bfe659fa61c892382e57d615f241cfc1d10361a0c7f18ad6d2b60ba1b598e9b6842ebbc5badc26f0f967c140e85cd694c0bb0e0086e5e2a4870ec9c9149b93ead8186f747ef0464ebf2bbfddfed56dcfe4907686aebcb8b1b8dcaeae5333c2de5d89ca6da5d44b1c87380de980eeedd0d5245b53a124046643d1b68f", 0xc4, r8)
pwrite64(r1, &(0x7f0000001540)="a2", 0x1, 0x7)
executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340))
r2 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2})
ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, 0x0)
r3 = syz_usb_connect(0x4, 0x40, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES16=r2, @ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT=r0, @ANYRESOCT=r0], 0x0)
syz_usb_ep_read(r3, 0x1, 0x0, 0x0)
executing program 0:
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
setns(0xc9, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
write(r3, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x1c, 0x21, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x01\x01b'}]}, 0x1c}], 0x1}, 0x800)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0010000, 0xec000000, 0xcd}]})
write$P9_RSTATFS(r0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x9, 0x1}, 0x8)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file2\x00', 0x40, 0x23)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$IOMMU_IOAS_IOVA_RANGES(r6, 0x3b84, &(0x7f0000000b40)={0x20, 0x0, 0x0, 0x0, 0x0})
r7 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x8000000, 0x2, 0x0, 0x4, 0x7, 0x6}, 0x20)
getresuid(&(0x7f0000000340)=<r8=>0x0, &(0x7f0000000380), &(0x7f00000003c0))
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000200)='./file0/file2\x00', &(0x7f0000000240), 0x20206e, &(0x7f0000000400)={'trans=virtio,', {[{@privport}, {@fscache}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@uname={'uname', 0x3d, '^]-('}}, {@version_9p2000}, {@access_client}, {@cache_loose}, {@fscache}], [{@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@seclabel}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x66, 0x34, 0x63, 0x32, 0x34, 0x36, 0x34], 0x2d, [0x66, 0x66, 0x3e, 0x38], 0x2d, [0x56, 0x61, 0x33, 0x62], 0x2d, [0x31, 0x36, 0x32, 0x35], 0x2d, [0x37, 0x63, 0x65, 0x65, 0x66, 0x39, 0x37, 0x36]}}}, {@pcr={'pcr', 0x3d, 0x2b}}, {@uid_lt={'uid<', r8}}]}})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x60, 0x4, 0x4, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7c, 0x76, 0x1, 0x0, 0x0, 0x8, 0x10, 0xc, 0xff, 0x0, '\x00', 0x0, 0x7f})
open_by_handle_at(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000f8"], 0x0)
executing program 2:
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='3', 0x4e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000002100010326bd7078fadbdf2505"], 0x14}}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdir(&(0x7f00000001c0)='./file1\x00', 0xb)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, <r5=>0x0}, &(0x7f0000000040)=0x5)
setreuid(r5, 0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x90)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0)
executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000048aa80, 0x0)
r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000002c0)="0000000000000002ff690000000000010000001800000006000200861f4104bfeacdd5a9007d16dcdc2850b5", 0x2c, r2)
r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r5=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @multicast}, 0x10)
sendto$packet(r3, &(0x7f0000000340)="f01f5f48adcd0b0f25d938703cc92352f9f4ff3c637eb8a9f9b70cc3f3de0556c5839c883a46b01b97f949779bc5d2c15884d71e421f5849cf72d9bd7fa2d8aa56c6eff17d972f64696d4c0b94435c127bdec27536ff47ae892ccbc1c64d4b50bc2b156bbcce0e516815f728b6309c9037f4bbbaa753b797ab7261b0f6abda638617bb1d5b9f7789b8f03ee7c4186b8baad1706fd035c0546fa2a48bee13c2fecc9bcf159047072d2253981cb789b80d27164c169d91ae5b322ae1a538ab467d4db996233f2215f136cbc736de7ec3c272adfe37075159653530c01ddd0242b975424a014b000b5d74077ef438", 0xed, 0x4004851, &(0x7f0000000440)={0x11, 0x1a, r5, 0x1, 0x0, 0x6, @remote}, 0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r0, 0x4238000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
executing program 0:
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x12)
mremap$dontunmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ffc000/0x3000)=nil)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000010c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4096, 0x1000, 0x0, &(0x7f0000001000)=""/184, 0xb8}, &(0x7f0000001100)=0x40)
mbind(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000001140)=0x7fff, 0xffffffffffffffff, 0x2)
mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000001180)=""/99)
r0 = userfaultfd(0x1000)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001200)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001240)={0x0, <r1=>0x0})
wait4(r1, &(0x7f00000012c0), 0xe0acb07db50fe067, &(0x7f0000001300))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001400)={<r3=>0xffffffffffffffff}, 0x2, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000001480)={0x9, 0x108, 0xfa00, {r3, 0x1, "65ced5", "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"}}, 0x110)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, &(0x7f00000015c0), 0x371, 0x0)
mprotect(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0)
mincore(&(0x7f0000ff9000/0x1000)=nil, 0x1000, &(0x7f0000001600)=""/116)
preadv(r2, &(0x7f0000002c00)=[{&(0x7f0000001680)=""/166, 0xa6}, {&(0x7f0000001740)=""/237, 0xed}, {&(0x7f0000001840)=""/146, 0x92}, {&(0x7f0000001900)=""/54, 0x36}, {&(0x7f0000001940)=""/245, 0xf5}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/248, 0xf8}, {&(0x7f0000002b40)=""/169, 0xa9}], 0x8, 0x80, 0x9)
futex_waitv(&(0x7f0000003900)=[{0x4c49, &(0x7f0000002c80)=0x5, 0x2}, {0x6, &(0x7f0000002cc0)=0x40, 0x80}, {0x32c, &(0x7f0000002d00)=0xe2d0, 0x2}, {0xffffffffffffffc0, &(0x7f0000002d40)=0x7, 0x2}, {0x6d, &(0x7f0000002d80)=0xdcf9, 0x43}, {0x7, &(0x7f0000002dc0)=0x8, 0x2}, {0x0, &(0x7f0000002e00)=0x2, 0x2}, {0xd8c3, &(0x7f0000002e40)=0x3, 0x2}, {0x6, &(0x7f0000002e80)=0x2, 0x82}, {0x3, &(0x7f0000002ec0)=0x6, 0x82}, {0x3ff, &(0x7f0000002f00)=0x1cf, 0x2}, {0x7, &(0x7f0000002f40)=0xeb, 0x82}, {0x100000000, &(0x7f0000002f80)=0x7, 0x82}, {0x9, &(0x7f0000002fc0)=0x5, 0x82}, {0x5, &(0x7f0000003000)=0x6, 0x82}, {0x9, &(0x7f0000003040)=0x1000, 0x2}, {0x6, &(0x7f0000003080)=0x5}, {0xe, &(0x7f00000030c0)=0x8f2, 0x82}, {0x6347, &(0x7f0000003100), 0x2}, {0x0, &(0x7f0000003140)=0x9, 0x82}, {0x80, &(0x7f0000003180)=0x100000000, 0x82}, {0xff, &(0x7f00000031c0), 0x2}, {0xff, &(0x7f0000003200)=0x100000000, 0x2}, {0x0, &(0x7f0000003240)=0x20, 0x82}, {0x5, &(0x7f0000003280)=0xe6, 0x2}, {0x2, &(0x7f00000032c0)=0xb1e, 0x2}, {0x0, &(0x7f0000003300)=0x2, 0x82}, {0x6, &(0x7f0000003340)=0x10001, 0x2}, {0x9, &(0x7f0000003380)=0x4, 0x2}, {0xa32, &(0x7f00000033c0)=0x1, 0x2}, {0x80000000, &(0x7f0000003400)=0x9, 0x2}, {0x3, &(0x7f0000003440)=0x8, 0x2}, {0x401, &(0x7f0000003480)=0x40, 0x2}, {0x10001, &(0x7f00000034c0)=0x2, 0x82}, {0x101, &(0x7f0000003500)=0x10000, 0x2}, {0x0, &(0x7f0000003540)=0x3f, 0x82}, {0x7f, &(0x7f0000003580)=0x3, 0x2}, {0xffffffffffffff27, &(0x7f00000035c0)=0x5, 0x2}, {0x8, &(0x7f0000003600)=0x1, 0x2}, {0x1, &(0x7f0000003640)=0x1c000, 0x2}, {0x7, &(0x7f0000003680)=0x2}, {0x88, &(0x7f00000036c0)=0x7, 0x2}, {0x10, &(0x7f0000003700)=0x7fff, 0x2}, {0x3, &(0x7f0000003740)=0x7}, {0x2, &(0x7f0000003780)=0x96, 0x2}, {0xffffffffffff2f43, &(0x7f00000037c0)=0x480, 0x2}, {0xffffffffffffffa8, &(0x7f0000003800)=0x9, 0x2}, {0x6, &(0x7f0000003840)=0x7, 0x82}, {0x1, &(0x7f0000003880)=0x7, 0x82}, {0x3ff, &(0x7f00000038c0)=0x9, 0x82}], 0x32, 0x0, &(0x7f0000003dc0), 0x1)
ioctl$int_in(r2, 0x0, &(0x7f0000003e00))
ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000003e40)=0xfffffff6)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000003e80)={@rand_addr=0x64010101, @loopback, 0x0, 0x7, [@rand_addr=0x64010102, @local, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote]}, 0x2c)
syz_clone3(&(0x7f00000050c0)={0x8000600, &(0x7f0000003ec0)=<r4=>0xffffffffffffffff, &(0x7f0000003f00), &(0x7f0000003f40), {0x2a}, &(0x7f0000003f80)=""/244, 0xf4, &(0x7f0000004080)=""/4096, &(0x7f0000005080)=[r1, r1, r1], 0x3}, 0x58)
r5 = dup3(r0, r4, 0x0)
mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2)
r6 = inotify_init()
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r8 = syz_open_dev$dmmidi(&(0x7f0000005140), 0x7, 0x2200)
ppoll(&(0x7f0000005180)=[{r5, 0x8200}, {r6, 0x8080}, {r4, 0x600}, {r5, 0x14a}, {r7, 0x6000}, {r5, 0x200}, {0xffffffffffffffff, 0x1023}, {r8, 0x1}], 0x8, &(0x7f00000051c0)={0x77359400}, &(0x7f0000005200)={[0x4]}, 0x8)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000005240)={'gretap0\x00'})
mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x3000002, 0x80010, r5, 0x0)
mmap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000000, 0x8010, r4, 0xfffffffffffff000)
executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvmmsg(r2, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000061, 0x0)
r3 = dup(r1)
ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
r5 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0)
syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2083"], 0x0, 0x0})
syz_usb_control_io(r5, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="d07b7238913de801e8b667665c6fecd55fa740bb522285b58c0d69dbd873674212738e8a17ac324171472006e78509eabf895e87984d92082fcbcbb5a95d325a55c70dfe3539f30d7e55b1bacfa92f00038b4acdb45325b69f3a8c118ee44f6ddb25cdf1e915b00c5c7ede594435e5c7b338fa0d00fe9b32c7ca02fb9dead6b8cc58ed993792c45b71a6c5b355b9512a97aa4f8ac42d6a371f98c19e361496615e81e6b5fd02a5a7ff013292e888b4364acc4ce2f189d634809846d2d02173316a816f050040f8d59f0ff68efadc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0xc002}, 0x810)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4090}, 0x40800)
r3 = socket$pppoe(0x18, 0x1, 0x0)
recvmmsg(r3, &(0x7f00000004c0)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)=""/203, 0xcb}, {&(0x7f0000000400)=""/105, 0x69}], 0x2}, 0x40}], 0x1, 0x61, 0x0)
write$rfkill(0xffffffffffffffff, &(0x7f0000000500)={0x1, 0x5, 0x1, 0x1, 0x1}, 0x8)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000680)={{<r4=>r3, &(0x7f0000000540)='TIPC\x00', 0x4000, &(0x7f0000000580)={@_ha_fsid={[0x7ff, 0x8000]}, {0x7, 0x6, 0x0, 0x101}}, 0x9eb0, &(0x7f00000005c0), &(0x7f0000000600)}, {[0xd, 0x3, 0x9, 0x4]}, 0x4, 0x25, &(0x7f0000000640)=""/37})
setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000700)=0x2, 0x2)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000006, 0x4100010, r4, 0x6e1c8000)
ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000740)={0x675, 0x5, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f000000a280))
ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f000000a2c0)=0x7)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000010980)={'gretap0\x00', &(0x7f0000010840)={'syztnl1\x00', <r5=>0x0, 0x10, 0x20, 0xfc, 0x8, {{0x40, 0x4, 0x2, 0x1, 0x100, 0x68, 0x0, 0x1, 0x4, 0x0, @local, @broadcast, {[@end, @timestamp={0x44, 0x18, 0xe3, 0x0, 0x9, [0x9, 0x7, 0x7, 0xbab, 0x1]}, @timestamp_addr={0x44, 0x14, 0xbb, 0x1, 0x7, [{@broadcast, 0x4}, {@multicast2, 0x101}]}, @timestamp={0x44, 0x8, 0x16, 0x0, 0xb, [0xffffffff]}, @rr={0x7, 0x1f, 0x18, [@broadcast, @dev={0xac, 0x14, 0x14, 0x3d}, @loopback, @dev={0xac, 0x14, 0x14, 0x1a}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @timestamp_addr={0x44, 0x14, 0x2c, 0x1, 0xe, [{@dev={0xac, 0x14, 0x14, 0x25}, 0x8}, {@private=0xa010102, 0xba6}]}, @end, @timestamp_prespec={0x44, 0x3c, 0xd9, 0x3, 0x0, [{@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@local, 0x3}, {@remote, 0xac}, {@multicast2, 0x3}, {@multicast1, 0x582}, {@empty, 0x2f09}]}, @timestamp_addr={0x44, 0x44, 0x5e, 0x1, 0xb, [{@local, 0x34}, {@multicast2, 0x1000}, {@local, 0xd99}, {@loopback, 0x9}, {@private=0xa010102, 0xfffff60f}, {@remote, 0xc}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x1}, {@rand_addr=0x64010100, 0x7}]}]}}}}})
sendmmsg$inet6(r4, &(0x7f0000010b80)=[{{&(0x7f000000a300)={0xa, 0x4e21, 0x2, @private1, 0x4}, 0x1c, &(0x7f000000c680)=[{&(0x7f000000a340)="43b80b08f76a807b972b152c412370a60f79fb72f719fa06e98468c481388f726194bb957bdc9cc367339c737a9cff7635999fa6506509ac788d11b6ab70cb51de308f2154b2e2a101b8855a3c146392ef71685c75c6013c9f0c6299addec83bf5d6bce5a663c49f611b6957e120f0160b5936a0d0cbf069657e47fd5734ca13159ff573964c1faca526126b22b0822a7cc4", 0x92}, {&(0x7f000000a400)="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", 0x1000}, {&(0x7f000000b400)="9df1cef960bcdb240d1b1b5784593377d39d29bd825e94ed767e5c1bca81a9898261470ab99449cada93ce4111c7b991a0", 0x31}, {&(0x7f000000b440)="7697133698b55a4079553e7fb5440b3eb5c4946c014eef690e27161b9aabbdf0f6e86d8a2c72f1d7fae6e789e85a7ddc5fc43b613f7bb13b092a9855", 0x3c}, {&(0x7f000000b480)="984881fcc159e6e2579b31932f610c09b649d29a03e807fc0829ecd1de872a091cf4657c10edbd34173c3f6e97bcc1e9fe05a5f7331b1f82026d1b45acf5", 0x3e}, {&(0x7f000000b4c0)="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", 0x1000}, {&(0x7f000000c4c0)="c8f51006bc1875a7804c153174faf7afee636b683dfad47095bd34f9da5420c9392269123dd2b4e0a7951ef3d1fa0c6cb2322e4dadcabbe63e213ad97f152d57d5f975794b4e7b0627630feaf8d529d2a05c5621c1ec9f5a7a8077506ce399730b72ea4992b0f01ddb19b961ad166ab01add3d08c4c59dc3207b8d6ec22136712d7a2ef128afcebcb9ce0f1e8227d93d269a9a18f92d7f2e9ae0b6e9916db9497aea4aa25e71fc3640af9e13b09b1331321c", 0xb2}, {&(0x7f000000c580)="869331abc7198686f4d0", 0xa}, {&(0x7f000000c5c0)="6e6859737c8d593482efe1873342c1e9747064479eaadf7e66de2e538af2a356875220a034548267a3ed5684ba3b73", 0x2f}, {&(0x7f000000c600)="7e357f9b90edd219bbce193a3b941f1db6dde45aa714d6d133bea5aa2da3220b12436114a53dfff2c8174d3dc1f1617942b51ff3ae652879f6aaee5fc872c024de1e8c4264e60f63398fd8eaf6474d65f31abab8d1f79c5d0705db9d9b049b57dff3735bb8b827c4caab4dad0c6994db8884b348161d1c55feb20c4f536743", 0x7f}], 0xa, &(0x7f000000c740)=[@hopopts_2292={{0xa8, 0x29, 0x36, {0x21, 0x11, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x7, 0x7, [0x9, 0x1000, 0xa3, 0x3d6]}}, @generic={0x1, 0x5e, "7b194697f3754bf8695a1882efa71dc7ffe8e51f43fea7ace88bb16d886574d83bd3d4332558f664580956bebaf73039db93c8a252fb662ad1cc0f4174ff1bd880488d52e9f981157c89f9d66db77e260d920890d94a83ba6dd1f4d468b9"}]}}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x0, 0x4, '\x00', [@ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0xff}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x80}, @hao={0xc9, 0x10, @mcast1}]}}}], 0xe8}}, {{&(0x7f000000c840)={0xa, 0xd, 0x10000, @empty, 0xfffffffd}, 0x1c, &(0x7f000000ca80)=[{&(0x7f000000c880)="882d425f5ab512435614acc13c2274f38a751798f2e48fb7a392ab0b577054", 0x1f}, {&(0x7f000000c8c0)="cee99cbfc25a3c1178d2d1d55df448064b17f7aa1e7b4571bd798001510276110f6c7b11ec71d490097367c5d8f14b3e4fbe81ac5ff2dbfb0f4a3f3b67068d1efcd0a29a691814b0cff6922a505fba46d6cb862a306681bde2b2ecc9730d8237816095fc89f31984eaf04f770b4c86f066aa96f569968670934931058c76b0fe49f915ef7c902201c4e9c63dc0a39afc8e6adafb0b33736c601fe86bd3a3f82ec52143a3a30b7c9f", 0xa8}, {&(0x7f000000c980)="7a6799659707c5a53b36a5dbae521f9b801445360fbd589cedcf1b3f82eddd7165be4e87c88b8e59ed95b43b0a344a2f240b657cc62c1e89281e62fec4f65fced212c3af76005b1b28cf4d7eea33c9771906cf9b9f4be9ccb1893ae547b5b61e9ad1694131a7c0b2b30c001c2d72f21587f550a3ae2ec50da1987e44b731e2579f8e94675c2072a50ae9d7681bde6e66817f90c242daacc58687fd8ddf96662a33aec2bf4546c19b4ee817247e44ab7f16de9876d8632cca393680bae800114f0e97effefbe198419a1ee7ce3e3ee50e5a8428606bf1fddc31fb6b", 0xdb}], 0x3}}, {{&(0x7f000000cac0)={0xa, 0x4e22, 0xfffffbff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c, &(0x7f000000de40)=[{&(0x7f000000cb00)="78a1d712f06bf816ab4086a24bb8642aa70564e0dc72a06bdbf8cb942c0933b7a8de5577457f11a385fbeee93646104efd1fe565da27081019e143e617cab8942d219ddc8a8c8a5934ae6373a11d6b95ea33368ce3b2ee9548c169e44d31362c40612ff6e10a045ab285a52f22b35354d3d6c2421b8ff15b41cb754bc1ac143df6c8278154dad4e1d229352d367f2407ce7580be17c2a9bc7b28b84e40eb14dd1a90db750a06dadbcd90553e2b8f39ebeed67ecfa26a8e2fe2815ea824289d501680dc0b279e", 0xc6}, {&(0x7f000000cc00)="d6e9b47cf178628113a1100e010e675caa2d0cf377d7b2a6abe64bd066af2972aa3b23d66640a2a5bb9b38f86660674ba7a3727880d8ee642eeb2b37cdd9e19c003234f3140e8fb24215e59528ec58aba7ca7abbcfa2557a1e11", 0x5a}, {&(0x7f000000cc80)="d84b01d162621a9d9c7ce9ae6bcc2744c80bb875777e0b370bfa143adf8800d6b672ea15ec765a832bd77c99f441d5b851ab9cd7526eef41130370649bd0f17ab9b43b83f70ebffb8356c7c176752cf1c75cf6a054c06ea4a131c5399510cae31a80b52e612a87cce05f6d1bd48dfd1b06f26bfb47972bfa7583d5a088436e8dc204d8a4f705cc2b1fde553497aa10aa52c4a77e198f247245f00989a8e710d4124ee2968e5ec5529b8f669e762daed6cd88fcfc6f67f933235ab920a236786a22810c679404740f55451828", 0xcc}, {&(0x7f000000cd80)="13415beef83138b1b6fda6ccd969", 0xe}, {&(0x7f000000cdc0)="ad2202998fbb97f6c4836d7a0d84a1103105acd536b2efdc1520dfc1d905e39009859946c6b148fa0e8863d4a33910d1bdd62732cccd9271031cb11b1ab3", 0x3e}, {&(0x7f000000ce00)="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", 0x1000}, {&(0x7f000000de00)="af85b80fe395081c8f65ba4e", 0xc}], 0x7, &(0x7f000000dec0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @dstopts={{0x120, 0x29, 0x37, {0x3a, 0x20, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @generic={0x0, 0xfe, "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"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xb}}, @tclass={{0x14, 0x29, 0x43, 0xfffffffa}}], 0x198}}, {{&(0x7f000000e080)={0xa, 0x4e24, 0x6, @local, 0x9}, 0x1c, &(0x7f000000e0c0)}}, {{&(0x7f000000e100)={0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000010480)=[{&(0x7f000000e140)="e27372987a9c15c9b263463e9d31e00f96e1ea8c8e1617a164ef", 0x1a}, {&(0x7f000000e180)="7be27119c0bb29ca8748d224eb5eeb8f9fdafa84b412ea261a688447f54fc9a97bc37f0af7e7c5fb39252d38ab3199a3fde0ef48dadeb6b5bd76dae6d17e6899a85a2cc93982e6d6e44a01200b47e070175873f746581fdb9675501400cf68b82b80995e3ce0250ba698b48e3eca7c62891cd91b682f44970a215efcad8c56abae6ddc7c9e", 0x85}, {&(0x7f000000e240)}, {&(0x7f000000e280)="9dc294519ea5b1ce564f6e71b09d1b881600f3556bbe950e678d5122016959414d642ab83bb9778340f7698254122212789f89f0d7a5738cb121b4823964fb299a71bb2d64f87ba8f85210054cf6a4a0dc2b4207294be4cc57ce0c8f89fb23f7f959c8595a15a0cb3209ebe36f414807c73803c8cb19272e68f5dc9a860d22aa59dd3e356d9d96dcda4f3e0ff5db390b496a5fe949cee687f898b50f405fa6992c2e9a3e6e1e442f23624d7afcf62b2081ea024a3b8dea4af6c3d1ba0b76033087d37f8af8bdc65e54924acef9084908e9750131b8a126d90fa439ace8aaff64", 0xe0}, {&(0x7f000000e380)="9d5e14f7b235cce97bfa556ac887f6d9fdb212a4f439681a138a8f90b0a9b0fb5e3b269241298e31758e323826a33553c84ae5c2927da772f7e1a95a4433f5ae14e265bd73d44d6fcb56346de276f921412a6c9547f7cbda310076ec539255e10d8042ac4a6959d19c8ca8b26b30b66930cf6a8308e07e49d74ffb986dc57ca79a6ca2e5e7a04286a108d99b745a74339fa2b9aed272cb792f47ca09799e2619f06248842e04015359ab579e681a3d35862b5d860556d87ea54edb69950cc4f3b79fd8f8e140b9d61c6906336fe17455eb2dcf3926a395fbc71612bfde84c729a07b1b9d812ce04f5fd02217671f418c0405db2fe01e0fbb155541da6df3476191d0939bab8e218f5fc6512f4759b329d019229301aa1d92e5b51f82a373b9907dfb9201edce171ecfd1006a77822819950695535b7aac740759d9335931eb15c4dfa258b9d8d6c74e8d57fa6f44025d674062ff1cafb5727b71efe9fc20417583cb4746b0af260f723c22d4e8011fac8cbbed1f29e91cf7dbbd8088502ec40808d58039d9584ff0fa756b83ae6eb9d1125901b14d75f164870a611be9d9842d6e58193ceec9db4ecd4269dc82192717f096d5d43550b8838dbea78039d9d56a9a7fa6057f5866ddcb9cf27c45c04fcc1c0284a450af4d4860188cfe2dc9aaceb001cd9b6c2f8e786a095f1987168890f4b9a34a0677087ad56df3cd71445d76f9a19cb70a2f5d1fb1f08f4d23d85331aa60b71b94434330cfbe6deb5b75f3f197ee5d51b663f8978edbe140038d7603cb0be5ddf8b0a0d22945d430f14a01b31253ccf4a7edc57a6e0fa3e11ccf331dce65067c675e1182b0f98dbb5dcf6b9fbc7b371534e999316cd0dbb770f3fa3e2796703b7f19c93a9901ccd27e99fd7de7b34d2f49b71a91860df6a72c85818c52ed9812b680cb46d1a3cfb0b7a31dcdb3781774869ae5bdbbbc784392e2fac658dbed6034baa40d4e432fbd6fd8fa34973342203e8f21540f357012b0f04206390502afe6fda23e2dc6345f41c268e938bfe86b459335ee503ab30158a2fd49706ab09f0d37a9bec03413d8b7ae3078f23c3dd14e07cb62262d0b5be7ae7ae4a25728a20ee2ae026d8d5a245ae8cb0bd18259985c4d195f9ad6f2dcccd0cbdf1e672784f44c5ebfada09ac0c4cbb6167ee7a9670ad9ff00a24c5d3b5032d706b9ed82ac13b7a9dacfb0ea10d56430c4ee6101b10a89ee71490128d41511f83cb9de0f38c0527c7ee78c537f2b29837739ba985d0a9737990b9a6c4454a6b392847d07a9aaf52c21eb5f4050d9189a466cf54652eb8c4819d4299e3ff5b901840e167733243b0d602eaaa57564d3577e919f219e105bc91649711818bf8e8487ef85526c095a86fc1290bec04075f84bdcb93edb0735ed9cb3984ae3cefb937a423a7135e036f8bdf9b2559cdbdcd06ca28aa69f69e9867701291196f1dfc5200ec8117321068a5820cdad4435bc181463485ca7fa75c0799e5f09a0e5a9b5e80d5527a947a996797826d420a6779f7ce0eb0293b483c5c8c90dba22d64d5babcf2131afdf1253d56d9619ce80ada9d0a855a58cdc70d65bcb5ffe0ee82995db24a57d95f54ebabd30b6ec84490802902a162fc69bb8e90a59c8cc570da12d4f831f98900eaa6961dee0cb5d8e565ac5e55071ae976f6f9a318e415d1f0d3568ab7271aeb0fc0ff81261e4fc0e6159bd00452bac1dbd6c79300a6216685f127f1401dba1b7da956318164396b2bc0c6c3a3db49c2423ec0c090838ea45c2014b3874ccf45cd27cbe4083490187ebc947f359aff8cfc5f3b37972f5e87fd5a328488febdb590df7d5ba30e7806fec135d5451e84f02425b9a8e91df5e3478c3521a65f743a49cb3ed40d3bf4b624d92eea8f5c16c3c7d98e7b42b282dc3a4c010e6908a10cb5d4285fddde572d006c54ee70df380b7aa757a0378f1007dfa914b27d0f7b46f8a7244e8258458f7b434665d7d3dd9e30fae54942293b95415e820f7529a2412fa7897abf4889023c4b7ac362c87a2690eaa0cad3c1c1b90655c13b367fd8566414a3f4b1b9f16c150d123caad247c379e6e59fa3a36f90d079d129c0f7eecfe993c530584898e40ecd74b39ac5fe538ef73a1fd845a983d654e90ea41e65e915045d76c4a581102e0086e407ec6b781a5ec51e7dec23eba896fd75e6b8dd333dc26225e1fe75abcd75334c76a2efb3622234146d348a60ff37303e2a7bef2a9893f6d2b4c5120d42dc39f0c5841ff78913866868ab78d46f5c8d528192ba1a3343b929909c8030a9311629a8d30f3fa52d443af0e74d6519627d416f881148742039647b0bd27bd960ff5948478f2292f0311a4f2c56901ac9d42bc852785837989267b69433a30f391c80cfae64fa7d7c341a465165fdd7e6f87cd68dc66b5bde317a2c70b9dc93a36056859f4d9f53d9c159e4929883f572bf6c947431acbf15c9e10e7bf7f020f97c728ccd51aa4e8a4961cd2dc962f6d3b5a6bd23c6d8fa1505282c9e1e9ef972b34e05cf07ecd00eb7666ada7781e3849b4e1b22c77b4919dfeb3ccdad19f14466f1c8a18aa91a056562cc03650b9ce566736a20be6d5cc853b578969fa621b60ae419743e21695964876633697e3d678fb13d84d9ed1f55078eacf8c3e780f3dbc2fd811fa6796e8b5048ff248d9adbb59f285688901f1278f73968fe3c365f37c26ff488356e2dd9127270ff19f80e8295b8bc71c8edd1d44e4643e27b6949a45387df164031b613d52a49606dff1037759960ab2ace95dc01f89d7e766a3cd5694c0e894112a37e69094c788975a855ed5600d64646881853b22a2203d74bd8974072126297946f1c1a4a01394ea308e1ac3f0e8141c7f4f8ba563ff5ae7197287f274a57b3aaefe8f9ee4724f4baadf9cdee157bf183f369206c469c9f05c1361052f641522eb9839e9c6e7d83c26e37f9b761644cef45cdbb64e763c901a9013958844d6496d83bfb222a65fb1ab4af028f5d4325b6d0393cf753977eb44b87ada8fcf43bd463857ac0d47c7e8e79b27bcab45d78db946d4ebe9ae1f2de183c421809fac24326d63bb3d9fd73769d623e4f2f10d965008dd7948e31e6320f4829c8a3faec743a3ce9bf1851d7f69c35f631f94993eaefa471aa7a099f0549e05898a0504812c0ccf9360297d8e78e44f15d56fd615c07e974dbb851fa75019e24d52379468792678008ba4cddab67a0e9c8ca4a0b2a0c15a05ded10726b33c88011397c0d75d24b5a205417eca6ee7da635929635f5250c59a3baeac8651123891b8d6945c2ede80bb8f04c0f5e7255ba420fa5572c1fb7ff869c9f66f044faf54b51affe864112eb74c7ee478eb8663500218e6269bf04ca19c113d8be58ca6e1a6c3d51ed2d4b03b489472c0a0256ba7514460e1bcf904317dad5b0e58042540673de62de4e5060a3ca37d76951826cf07566b325f8af7ccb69fbb37e5aa6d67c60887a4dec66c14102bb9965f34cdcf3a5c35fe402e725bda6a955a3b999b715d862b81f3b2893963814d554a46236e138bf72b11a0a25f77248e710b9fe397992c52b4a6e8a6a63f5b0607d1aba5aa6ae114b1ac5e8ab62842386820eef7000090c001f0f265f10bbdc30b9e0cd393b3bf811d987dae8c896ce44b2003a8c3f76a549a46e2e48d23d30932e4267346f51c3e16e2690023dccc787e7f5c2c7ccb49749c64839f200cfeb326fe1e139f3dc9367e37efb691b7a765feeb7278d7f67e5294252a8e3113eb5de86a816b883866db155564da75a41185ced4022b9a0b67674c79f6e2cb1956e981f1d79f9c57ab0bda89c09b558178349807a8adae14de9fd9b61f3d197316516782d6d2633bf964f4a77296e14e8816fd4fd90e5d9e7e1a7b3697da80a2a2537cf6635547b73514e4c8c89e73e882ae2fd90e68a40dbfb02a98755be0fe4e5bf7472e84d689a7c2a2bc8461ee8a5dbe26fc534730ea18a958547bfa7c3b46c1a22b8051169599ce6efc370d0d91a5ad17a9a3965d99b841ae2968110fb606fa5d2f70197d32ce7f1419dd2fa013427b594bc774c67e8984b83d5a6a8cc7aaa72ff88df8b9216bfc145dbe887ef21324676387202637fda194a3ed91bcd23571d4e6c5d6d10159dda4e4eac5cadfc072aefba312245ecdc209f3d5206a7a65076cf430a74b9560da2847f9ee4b9410c5eed0a02c54b6569470ebb877e8d365f11f1e6af9b0c6fa053bc902c0d92bb1a136f429b77926111736c958adde76c048b623bb8060a1ff5fd7743bc9582dfdb0ab801ca3bd849d62f9caced3da1766f84347ffde70fb78f210b49041127fb98640a2b5954bde104ba0692998711943f41d5aca23828d1f17e986c7d6d4e6d0a1fd3bc7f1af9dc01bc2218671708edffbf85ecc11a9e990e3534eccc78833447705fd1307b3a9858326fdbf846efb194a4c04f171dfa7923a3116c71092cfff12c81def8ef849e26ded07c3af943bb51ec274361ad3e6b81a3a11517a1a28b78192d78e88ce3c55f32386c978e89de8f256d56ee908409de4a573f4f8fc36f3e486c920ad729509fd3eabe71afb494837c30de33f691eecd5cb5fa2492f903864dc919742ef2e198e2a655734d4c589990bb85fb1f0df01266c9ba4ce52f0fb8f1db94e568bc8084bd8cd5606e2ae177fa2821fb8fa689078ecb9652454534bff00ecf5aef24e9a52a82ff2a9b528d12108177518d1444305f313000be7f9304144f76927c200a79a4d8161477977394c9760910ea9e5b1a4e38abff959f33d0fd406c6711e699aba7cc8aaacc5d68e3cbf3481e9915a6c2840aa5eae0fccb94047a04b215bf750eb8fac10434cd990a23e486f0623921850692415d0413ae9cdc7660a94b48b286644a2226030212215b003f10cbb9cbb6a0d01b6698b2b19413e1d4a346891c55521ffdd80c0a7dd22dc13c1dacede921e5afd34650c0f6eaf9a4a2d0a7667bf8178b9f15e1c64020d4aa2676844490bbd73152b221394373794afcb840fbda20b1942bb0e48b7f768834d609aebeca23093d2bca29af274055043ae736e51fc0064a4314ef7ba456a1d6ae5a575ed53d61baaf0ccd566c9081531ceee3fe25c7ace4bc0de81a742e764ff78c9c8c25f7f0e894ab9747727e5cdb4034e934647ab6eb25d9911c0ec8056d4e4366c975baa6f0c0abc2c7f5ccfdf75caccc8a1a60d916943d0c852c1d79a11c4ceae7a0e3a725682e42a1c7a8ddd053a1fa3e3aeda71ef95855f2035e22b9477b47d446f7bb41169ab9375992812c40ba4b64120e268cd862564a47565462f8e29dbfaccf66be910704fbfb9a540cca2ba23b04b7f251eacc9a1c22d3024d06500f02f81fa92ca330c86d3e594e5d82b35a59a3d2f443c8d13bffc878e0d0298d3c4ada1477e0d3bb8443b9b7d31a4fbd230f4e9e1dc7becb7ece3293712348218915b26c86006ee60de301e21fcb5add5d38e7c7d3c73dfc4925effd5c075e2bece4109c915721912ce7d375fa0b3550491d00e384c658f2c688cf6ca67ec6cfeb624bf3464d4d6b2ed5cbfec6d4c82d78406e903d961b6bfe4fda165e6548e9c110ca69a2091742acaf89405cf043886cf56155cbbd39dfc5b646911ee6f14e3045588926531e9ef799c2f0ae8f105961e17ffec445ebd2f8122b2595d94ae9cff2269608cc67b95f11ee4bd069250ea212ce65ca37c2c5c49e062f7eeafd2c54d3b01b5a43aefee038b8ff5972f64198c1895c69cb52a632da9e99697d6e5e7d261044a31faa5193ed83ec5ab5737", 0x1000}, {&(0x7f000000f380)="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", 0x1000}, {&(0x7f0000010380)="6c3935f2766df43c465db1d854534a2694f6e08f861d405798c454e6850cc77e51e44f8622fecf3a93802275016bb6410c5d28242d3451dc3713f749bad2e8e8a1559fbf3b4f3bdf212fc0f3a741e191a15a19f8530a37297851aabce005928c6953fe9de271b84960df3eca87a68c91a81a6b5139a2e680eeb2e798a712a3535f08fe25b5a868a9ecae16de879971094bbe8eeb57c88071d82f8172c6d2f3f4d38b5341e5c48c71fa36b4d831867a9b0385ea57dd9bc8ff8da6d067c3985b6c3da38e1349e8d4604e6825d813586348049176947ad0d1cfa825b8a27be10af2fd0efc95cc34abc77b5cb097e34f4905ab5a", 0xf2}], 0x7}}, {{&(0x7f0000010500)={0xa, 0x4e24, 0x3, @mcast2, 0x8}, 0x1c, &(0x7f0000010800)=[{&(0x7f0000010540)="c1e275b6c34a13dba306bf28eb798eb7f96b21ea1815431c9fb7cca678467b6515cfce9fff92f9ac105bc2ca84a155ebf7c3c1fcedc1840b7fcee263ce11639a89cef8f49f49cd58a37ab379969ba348727a9c88e44126cb79a5036750c9f03c8c0f0b40f66a27f02b62ae91dee8061720f60c0730384c886428b5fe6ff63d7d35f1694ec0f48e5250c148e9d398432db9e32b6ff4d9ce2c560b5bb2316aa0e7abbeb84dfa27559666570c333b9cd2785246019be9cec050b7130343aa0a555df751ea4067441606a18be9ff226f936e45f6a236aeed5a8b893ed20de6d071", 0xdf}, {&(0x7f0000010640)="23167bf1e28e5eaddf071f6528d8b1c9359e7abcd5004da40466d3865101874f1d8bd7dc1f1e67", 0x27}, {&(0x7f0000010680)="deae00cc11a59356b1c020093dc3d0fed8317f94b2500650434265e226a740bb12becbd206f7f26eb647d5496a2eac8da763ad488f940632cf9408e3a17f5967be02b8d031d6c1642ed53c43c597b7f9d64874f79bbca0317ec4d1ace8bafc9b2ba4b07648538e5c2545f0", 0x6b}, {&(0x7f0000010700)="9c4111005e0783d7381865585c79bcb604ed116640f7501dda0ba360b3caa18ba16918938cea6e9b74cdca0dd121368e34d303db2780ec3e4a21a1f8c537081fa16d127967591fdfd7a9b65420f9f39d93f2f691a2fd709aa54948666acbaf0935d5ae394d1a08b6ffedf43dd9b25409b0aa3c684238de521bf7a2cf32c852eb1fd93ed33d595e2c6538246513b29b16a3910da4ee1599e3bc5a2e66f069073b55a1d40387132474ee98e828549bda0e92782490d3fb76bd43035e40d83217d16ebc18c256ae224ffc9dc86ad5c2f7c972b0e6ddc1dbaa3752a06c4ccdf2a2f8efe072f1e17ab3a78c85af42b0df4a84c0a37264006e63bda7b8", 0xfa}], 0x4, &(0x7f00000109c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r5}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4e8a}}, @rthdr={{0x88, 0x29, 0x39, {0x11, 0xe, 0x2, 0x3, 0x0, [@empty, @dev={0xfe, 0x80, '\x00', 0xe}, @local, @mcast2, @local, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8000}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x89, 0xc, '\x00', [@enc_lim={0x4, 0x1, 0xf8}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x50, {0x1, 0x12, 0xc, 0x2, [0x6, 0x1, 0xb9c, 0x3, 0x0, 0x9, 0x10001, 0xffffffff, 0x46]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}], 0x1b8}}], 0x6, 0x20040010)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000010dc0)={&(0x7f0000010d00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000010d80)={&(0x7f0000010d40)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x4008800)
pwrite64(r0, &(0x7f0000010e00)="e4abdbb37721b3d4f1ee33ac81430bf7d5c9236a4121496564bb96567fea8280ac0151045c7a85ef154f4c69710b4344c59e128e3233da186580aea9fd7c614490b3b9a36a6d34307ac4102554b16df3c1297f40594529adf03b59fd2a98f7923616a59358299fec0ab3fd500cc237fbffe962adb5a6a043e48ea911aa66291b7844d318afdc3ec5da100a43c261aef80bbeb2b21582cad191d3f34e302eec7ecdee5c56e93a5c2a9096227666f06f5abebc63621811eb87a8513fd76a532dcfee1318864675b43934a781424cba300a0568a5e8d86c664043d1", 0xda, 0x100)
ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000010f40)={0x4, &(0x7f0000010f00)=[{}, {}, {}, {}]})
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000010f80)={<r6=>r0})
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000011000), r1)
sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000011100)={&(0x7f0000010fc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000110c0)={&(0x7f0000011040)={0x48, r7, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x0)
ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000011140))
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f0000011180)=0x9427)
r8 = syz_open_dev$mouse(&(0x7f00000111c0), 0x5, 0x28000)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000011200)={{0x1, 0x1, 0x18, r6, {0x6}}, './file0\x00'})
r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000011240), 0x10000, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1)
ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000011280))
syz_genetlink_get_family_id$ethtool(&(0x7f00000112c0), r4)
executing program 0:
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66)
syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080))
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0xb})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
writev(r4, &(0x7f00000000c0)=[{&(0x7f00000003c0)="cfa0d35cebc223319c8afb44cad4095cc7e60f32b2eb1fca8d61728672a67e8ed596fe8f1d05d625130104a09f22800debc81fe1e0c58b066644977e58ed9bb343c3fe41f8c1965c5dfcd6a641f325f751672f240e3c3e46a2f0af4880dd9092de37be5fa2dec433d664e1610017da883d7734c643822230e0fcfbab8ccb4f6b999b2b5827a1b274d5d7ae5048bd1c65640ec460b1361106056a1d91ea54e16fcca07574c829df33a23afb23f55d02738d4e4d3899bdd87a02eb0a6a81361c76c845ed5de0270309", 0xc8}], 0x1)
r5 = userfaultfd(0x800)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000900feffff7f3626feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace80177ccbec4c2ee5a7cef4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee28a0", 0xd8}], 0x1}, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r8)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES64=r7, @ANYBLOB="69d63b52b6aadf697c", @ANYRES64=r8, @ANYRES64=r1, @ANYRESOCT, @ANYRES32=r6, @ANYRESDEC=r8, @ANYRES32=0x0], 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000)
ioctl$TCSETS(r7, 0x4b52, &(0x7f0000000100)={0xfa, 0x0, 0x3, 0x40000008, 0x18, "88bd91aa90758062b5fffd9272e301aa98af75"})
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108})
r9 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r9, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r10, 0x5b02, 0x0)
read$char_usb(r10, 0x0, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x2200040, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') (fail_nth: 7)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x1000)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)
write$FUSE_BMAP(r0, &(0x7f00000028c0)={0x18, 0xfffffffffffffff5, 0x0, {0x6}}, 0x18)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-chdir-openat$cgroup_ro-symlinkat-name_to_handle_at-open_by_handle_at-write$FUSE_BMAP
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x2200040, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') (fail_nth: 7)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x1000)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)
write$FUSE_BMAP(r0, &(0x7f00000028c0)={0x18, 0xfffffffffffffff5, 0x0, {0x6}}, 0x18)

program crashed: KASAN: invalid-free in jffs2_free_inode
single: successfully extracted reproducer
found reproducer with 8 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-chdir-openat$cgroup_ro-symlinkat-name_to_handle_at-open_by_handle_at
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x2200040, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') (fail_nth: 7)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x1000)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)

program crashed: KASAN: invalid-free in jffs2_free_inode
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-chdir-openat$cgroup_ro-symlinkat-name_to_handle_at
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x2200040, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') (fail_nth: 7)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x1000)

program crashed: KASAN: invalid-free in jffs2_free_inode
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-chdir-openat$cgroup_ro-symlinkat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x2200040, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') (fail_nth: 7)

program crashed: KASAN: invalid-free in jffs2_free_inode
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-chdir-openat$cgroup_ro
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x2200040, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-chdir-symlinkat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x2200040, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') (fail_nth: 7)

program crashed: KASAN: invalid-free in jffs2_free_inode
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-symlinkat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x2200040, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') (fail_nth: 7)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-chdir-symlinkat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
chdir(&(0x7f0000000240)='./file0\x00')
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') (fail_nth: 7)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-chdir-symlinkat
detailed listing:
executing program 0:
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x2200040, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') (fail_nth: 7)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-chdir-symlinkat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x2200040, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-chdir-symlinkat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, 0x0, 0x178)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x2200040, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') (fail_nth: 7)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-chdir-symlinkat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x2200040, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') (fail_nth: 7)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-chdir-symlinkat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
mount(&(0x7f0000000200)=@filename='mtd0\x00', 0x0, &(0x7f0000000300)='jffs2\x00', 0x2200040, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') (fail_nth: 7)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-chdir-symlinkat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2200040, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') (fail_nth: 7)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-chdir-symlinkat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x2200040, 0x0)
chdir(0x0)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') (fail_nth: 7)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-chdir-symlinkat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x2200040, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') (fail_nth: 7)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-chdir-symlinkat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x2200040, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, 0x0) (fail_nth: 7)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-chdir-symlinkat
program crashed: KASAN: invalid-free in jffs2_free_inode
simplifying C reproducer
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-chdir-symlinkat
program crashed: KASAN: invalid-free in jffs2_free_inode
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-chdir-symlinkat
program crashed: KASAN: invalid-free in jffs2_free_inode
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-chdir-symlinkat
program crashed: KASAN: invalid-free in jffs2_free_inode
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-chdir-symlinkat
program crashed: KASAN: invalid-free in jffs2_free_inode
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-chdir-symlinkat
program did not crash
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-chdir-symlinkat
program crashed: KASAN: invalid-free in jffs2_free_inode
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-chdir-symlinkat
program crashed: KASAN: invalid-free in jffs2_free_inode
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-chdir-symlinkat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x2200040, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') (fail_nth: 7)

program crashed: KASAN: invalid-free in jffs2_free_inode
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-chdir-symlinkat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x2200040, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') (fail_nth: 7)

program crashed: KASAN: invalid-free in jffs2_free_inode
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-chdir-symlinkat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x2200040, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') (fail_nth: 7)

program crashed: KASAN: invalid-free in jffs2_free_inode
validation run: crashed=true
reproducing took 54m46.953827347s
repro crashed as (corrupted=false):
RSP: 002b:00007ffed613c038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
RAX: ffffffffffffffda RBX: 00007fa9e1225fa0 RCX: 00007fa9e0f9e159
RDX: 0000200000000080 RSI: ffffffffffffff9c RDI: 0000200000000000
RBP: 00007ffed613c0a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007fa9e1225fac R14: 00007fa9e1225fa0 R15: 00007fa9e1225fa0
 </TASK>
==================================================================
BUG: KASAN: double-free in jffs2_free_inode+0x41/0x60 fs/jffs2/super.c:52
Free of addr ffff8880216a6380 by task syz.0.224/6314

CPU: 0 UID: 0 PID: 6314 Comm: syz.0.224 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 print_address_description+0x55/0x1e0 mm/kasan/report.c:378
 print_report+0x58/0x70 mm/kasan/report.c:482
 kasan_report_invalid_free+0xea/0x110 mm/kasan/report.c:557
 check_slab_allocation mm/kasan/common.c:-1 [inline]
 __kasan_slab_pre_free+0x104/0x120 mm/kasan/common.c:272
 kasan_slab_pre_free include/linux/kasan.h:199 [inline]
 slab_free_hook mm/slub.c:2725 [inline]
 slab_free mm/slub.c:6630 [inline]
 kfree+0x173/0x650 mm/slub.c:6923
 jffs2_free_inode+0x41/0x60 fs/jffs2/super.c:52
 i_callback fs/inode.c:318 [inline]
 alloc_inode+0x17c/0x1b0 fs/inode.c:353
 iget_locked+0x12c/0x690 fs/inode.c:1473
 jffs2_iget+0xac/0xcc0 fs/jffs2/fs.c:265
 jffs2_lookup+0x377/0x430 fs/jffs2/dir.c:114
 lookup_one_qstr_excl+0x12d/0x360 fs/namei.c:1810
 __start_dirop fs/namei.c:2920 [inline]
 start_dirop fs/namei.c:2942 [inline]
 filename_create+0x20e/0x370 fs/namei.c:5101
 filename_symlinkat+0xf7/0x410 fs/namei.c:5824
 __do_sys_symlinkat fs/namei.c:5850 [inline]
 __se_sys_symlinkat+0x4e/0x2b0 fs/namei.c:5845
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa9e0f9e159
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffed613c038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
RAX: ffffffffffffffda RBX: 00007fa9e1225fa0 RCX: 00007fa9e0f9e159
RDX: 0000200000000080 RSI: ffffffffffffff9c RDI: 0000200000000000
RBP: 00007ffed613c0a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007fa9e1225fac R14: 00007fa9e1225fa0 R15: 00007fa9e1225fa0
 </TASK>

Allocated by task 6042:
 kasan_save_stack mm/kasan/common.c:57 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:409 [inline]
 __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:426
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __do_kmalloc_node mm/slub.c:5531 [inline]
 __kmalloc_noprof+0x366/0x710 mm/slub.c:5556
 _kmalloc_noprof include/linux/slab.h:995 [inline]
 jffs2_do_read_inode_internal+0x4d11/0x6790 fs/jffs2/readinode.c:1271
 jffs2_do_read_inode+0x4b4/0x6a0 fs/jffs2/readinode.c:1389
 jffs2_iget+0x228/0xcc0 fs/jffs2/fs.c:277
 jffs2_lookup+0x377/0x430 fs/jffs2/dir.c:114
 lookup_one_qstr_excl+0x12d/0x360 fs/namei.c:1810
 __start_dirop fs/namei.c:2920 [inline]
 start_dirop fs/namei.c:2942 [inline]
 filename_create+0x20e/0x370 fs/namei.c:5101
 filename_symlinkat+0xf7/0x410 fs/namei.c:5824
 __do_sys_symlinkat fs/namei.c:5850 [inline]
 __se_sys_symlinkat+0x4e/0x2b0 fs/namei.c:5845
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 15:
 kasan_save_stack mm/kasan/common.c:57 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:78
 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:264 [inline]
 __kasan_slab_free+0x5c/0x80 mm/kasan/common.c:296
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2780 [inline]
 slab_free mm/slub.c:6630 [inline]
 kfree+0x1c5/0x650 mm/slub.c:6923
 jffs2_free_inode+0x41/0x60 fs/jffs2/super.c:52
 rcu_do_batch kernel/rcu/tree.c:2650 [inline]
 rcu_core+0x926/0x1260 kernel/rcu/tree.c:2919
 handle_softirqs+0x223/0x840 kernel/softirq.c:645
 run_ksoftirqd+0x36/0x60 kernel/softirq.c:1099
 smpboot_thread_fn+0x565/0xa70 kernel/smpboot.c:160
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

The buggy address belongs to the object at ffff8880216a6380
 which belongs to the cache kmalloc-8 of size 8
The buggy address is located 0 bytes inside of
 8-byte region [ffff8880216a6380, ffff8880216a6388)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880216a6a60 pfn:0x216a6
flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000200 ffff88813ff24500 ffffea0000adf290 ffffea0000adaf50
raw: ffff8880216a6a60 000000000080004e 00000000f5000000 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3479526280
 set_page_owner include/linux/page_owner.h:33 [inline]
 post_alloc_hook+0x1f9/0x250 mm/page_alloc.c:1854
 prep_new_page mm/page_alloc.c:1862 [inline]
 get_page_from_freelist+0x2209/0x2280 mm/page_alloc.c:3933
 __alloc_frozen_pages_noprof+0x1fc/0x400 mm/page_alloc.c:5441
 alloc_slab_page mm/slub.c:3384 [inline]
 allocate_slab+0x7d/0x5e0 mm/slub.c:3499
 new_slab mm/slub.c:3550 [inline]
 refill_objects+0x2d5/0x350 mm/slub.c:7539
 refill_sheaf mm/slub.c:2917 [inline]
 __pcs_replace_empty_main+0x2c8/0x6c0 mm/slub.c:4811
 alloc_from_pcs mm/slub.c:4887 [inline]
 slab_alloc_node mm/slub.c:5021 [inline]
 __do_kmalloc_node mm/slub.c:5530 [inline]
 __kmalloc_noprof+0x476/0x710 mm/slub.c:5556
 _kmalloc_noprof include/linux/slab.h:995 [inline]
 acpi_ex_allocate_name_string+0x79/0x290 drivers/acpi/acpica/exnames.c:66
 acpi_ex_get_name_string+0x488/0xa90 drivers/acpi/acpica/exnames.c:367
 acpi_ds_create_operand+0x5c7/0xbe0 drivers/acpi/acpica/dsutils.c:446
 acpi_ds_evaluate_name_path+0x1a5/0x460 drivers/acpi/acpica/dsutils.c:778
 acpi_ds_exec_end_op+0x28b/0x1b00 drivers/acpi/acpica/dswexec.c:374
 acpi_ps_parse_loop+0xfa3/0x23f0 drivers/acpi/acpica/psloop.c:553
 acpi_ps_parse_aml+0x388/0x1020 drivers/acpi/acpica/psparse.c:489
 acpi_ps_execute_method+0x89d/0xa70 drivers/acpi/acpica/psxface.c:190
 acpi_ns_evaluate+0xd05/0x1320 drivers/acpi/acpica/nseval.c:205
page last free pid 1 tgid 1 ts 3320811456 stack trace:
 reset_page_owner include/linux/page_owner.h:26 [inline]
 __free_pages_prepare mm/page_alloc.c:1401 [inline]
 __free_frozen_pages+0xc93/0xd90 mm/page_alloc.c:2952
 __slab_free+0x269/0x2c0 mm/slub.c:5926
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179
 kasan_quarantine_remove_cache+0x35d/0x380 mm/kasan/quarantine.c:388
 kmem_cache_shrink+0xd/0x20 mm/slab_common.c:611
 acpi_os_purge_cache+0x15/0x20 drivers/acpi/osl.c:1622
 acpi_purge_cached_objects+0xac/0x100 drivers/acpi/acpica/utxface.c:239
 acpi_initialize_objects+0x2e/0xb0 drivers/acpi/acpica/utxfinit.c:250
 acpi_bus_init+0xa8/0x360 drivers/acpi/bus.c:1397
 acpi_init+0xa1/0x1f0 drivers/acpi/bus.c:1486
 do_one_initcall+0x250/0x870 init/main.c:1360
 do_initcall_level+0x10a/0x1a0 init/main.c:1422
 do_initcalls+0x59/0xa0 init/main.c:1438
 kernel_init_freeable+0x29d/0x3e0 init/main.c:1673
 kernel_init+0x22/0x1d0 init/main.c:1563
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158

Memory state around the buggy address:
 ffff8880216a6280: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
 ffff8880216a6300: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
>ffff8880216a6380: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
                   ^
 ffff8880216a6400: fa fc fc fc fa fc fc fc 05 fc fc fc 05 fc fc fc
 ffff8880216a6480: 05 fc fc fc 05 fc fc fc 06 fc fc fc 06 fc fc fc
==================================================================

final repro crashed as (corrupted=false):
RSP: 002b:00007ffed613c038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
RAX: ffffffffffffffda RBX: 00007fa9e1225fa0 RCX: 00007fa9e0f9e159
RDX: 0000200000000080 RSI: ffffffffffffff9c RDI: 0000200000000000
RBP: 00007ffed613c0a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007fa9e1225fac R14: 00007fa9e1225fa0 R15: 00007fa9e1225fa0
 </TASK>
==================================================================
BUG: KASAN: double-free in jffs2_free_inode+0x41/0x60 fs/jffs2/super.c:52
Free of addr ffff8880216a6380 by task syz.0.224/6314

CPU: 0 UID: 0 PID: 6314 Comm: syz.0.224 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 print_address_description+0x55/0x1e0 mm/kasan/report.c:378
 print_report+0x58/0x70 mm/kasan/report.c:482
 kasan_report_invalid_free+0xea/0x110 mm/kasan/report.c:557
 check_slab_allocation mm/kasan/common.c:-1 [inline]
 __kasan_slab_pre_free+0x104/0x120 mm/kasan/common.c:272
 kasan_slab_pre_free include/linux/kasan.h:199 [inline]
 slab_free_hook mm/slub.c:2725 [inline]
 slab_free mm/slub.c:6630 [inline]
 kfree+0x173/0x650 mm/slub.c:6923
 jffs2_free_inode+0x41/0x60 fs/jffs2/super.c:52
 i_callback fs/inode.c:318 [inline]
 alloc_inode+0x17c/0x1b0 fs/inode.c:353
 iget_locked+0x12c/0x690 fs/inode.c:1473
 jffs2_iget+0xac/0xcc0 fs/jffs2/fs.c:265
 jffs2_lookup+0x377/0x430 fs/jffs2/dir.c:114
 lookup_one_qstr_excl+0x12d/0x360 fs/namei.c:1810
 __start_dirop fs/namei.c:2920 [inline]
 start_dirop fs/namei.c:2942 [inline]
 filename_create+0x20e/0x370 fs/namei.c:5101
 filename_symlinkat+0xf7/0x410 fs/namei.c:5824
 __do_sys_symlinkat fs/namei.c:5850 [inline]
 __se_sys_symlinkat+0x4e/0x2b0 fs/namei.c:5845
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa9e0f9e159
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffed613c038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
RAX: ffffffffffffffda RBX: 00007fa9e1225fa0 RCX: 00007fa9e0f9e159
RDX: 0000200000000080 RSI: ffffffffffffff9c RDI: 0000200000000000
RBP: 00007ffed613c0a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007fa9e1225fac R14: 00007fa9e1225fa0 R15: 00007fa9e1225fa0
 </TASK>

Allocated by task 6042:
 kasan_save_stack mm/kasan/common.c:57 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:409 [inline]
 __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:426
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __do_kmalloc_node mm/slub.c:5531 [inline]
 __kmalloc_noprof+0x366/0x710 mm/slub.c:5556
 _kmalloc_noprof include/linux/slab.h:995 [inline]
 jffs2_do_read_inode_internal+0x4d11/0x6790 fs/jffs2/readinode.c:1271
 jffs2_do_read_inode+0x4b4/0x6a0 fs/jffs2/readinode.c:1389
 jffs2_iget+0x228/0xcc0 fs/jffs2/fs.c:277
 jffs2_lookup+0x377/0x430 fs/jffs2/dir.c:114
 lookup_one_qstr_excl+0x12d/0x360 fs/namei.c:1810
 __start_dirop fs/namei.c:2920 [inline]
 start_dirop fs/namei.c:2942 [inline]
 filename_create+0x20e/0x370 fs/namei.c:5101
 filename_symlinkat+0xf7/0x410 fs/namei.c:5824
 __do_sys_symlinkat fs/namei.c:5850 [inline]
 __se_sys_symlinkat+0x4e/0x2b0 fs/namei.c:5845
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 15:
 kasan_save_stack mm/kasan/common.c:57 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:78
 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:264 [inline]
 __kasan_slab_free+0x5c/0x80 mm/kasan/common.c:296
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2780 [inline]
 slab_free mm/slub.c:6630 [inline]
 kfree+0x1c5/0x650 mm/slub.c:6923
 jffs2_free_inode+0x41/0x60 fs/jffs2/super.c:52
 rcu_do_batch kernel/rcu/tree.c:2650 [inline]
 rcu_core+0x926/0x1260 kernel/rcu/tree.c:2919
 handle_softirqs+0x223/0x840 kernel/softirq.c:645
 run_ksoftirqd+0x36/0x60 kernel/softirq.c:1099
 smpboot_thread_fn+0x565/0xa70 kernel/smpboot.c:160
 kthread+0x38b/0x480 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

The buggy address belongs to the object at ffff8880216a6380
 which belongs to the cache kmalloc-8 of size 8
The buggy address is located 0 bytes inside of
 8-byte region [ffff8880216a6380, ffff8880216a6388)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880216a6a60 pfn:0x216a6
flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000200 ffff88813ff24500 ffffea0000adf290 ffffea0000adaf50
raw: ffff8880216a6a60 000000000080004e 00000000f5000000 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3479526280
 set_page_owner include/linux/page_owner.h:33 [inline]
 post_alloc_hook+0x1f9/0x250 mm/page_alloc.c:1854
 prep_new_page mm/page_alloc.c:1862 [inline]
 get_page_from_freelist+0x2209/0x2280 mm/page_alloc.c:3933
 __alloc_frozen_pages_noprof+0x1fc/0x400 mm/page_alloc.c:5441
 alloc_slab_page mm/slub.c:3384 [inline]
 allocate_slab+0x7d/0x5e0 mm/slub.c:3499
 new_slab mm/slub.c:3550 [inline]
 refill_objects+0x2d5/0x350 mm/slub.c:7539
 refill_sheaf mm/slub.c:2917 [inline]
 __pcs_replace_empty_main+0x2c8/0x6c0 mm/slub.c:4811
 alloc_from_pcs mm/slub.c:4887 [inline]
 slab_alloc_node mm/slub.c:5021 [inline]
 __do_kmalloc_node mm/slub.c:5530 [inline]
 __kmalloc_noprof+0x476/0x710 mm/slub.c:5556
 _kmalloc_noprof include/linux/slab.h:995 [inline]
 acpi_ex_allocate_name_string+0x79/0x290 drivers/acpi/acpica/exnames.c:66
 acpi_ex_get_name_string+0x488/0xa90 drivers/acpi/acpica/exnames.c:367
 acpi_ds_create_operand+0x5c7/0xbe0 drivers/acpi/acpica/dsutils.c:446
 acpi_ds_evaluate_name_path+0x1a5/0x460 drivers/acpi/acpica/dsutils.c:778
 acpi_ds_exec_end_op+0x28b/0x1b00 drivers/acpi/acpica/dswexec.c:374
 acpi_ps_parse_loop+0xfa3/0x23f0 drivers/acpi/acpica/psloop.c:553
 acpi_ps_parse_aml+0x388/0x1020 drivers/acpi/acpica/psparse.c:489
 acpi_ps_execute_method+0x89d/0xa70 drivers/acpi/acpica/psxface.c:190
 acpi_ns_evaluate+0xd05/0x1320 drivers/acpi/acpica/nseval.c:205
page last free pid 1 tgid 1 ts 3320811456 stack trace:
 reset_page_owner include/linux/page_owner.h:26 [inline]
 __free_pages_prepare mm/page_alloc.c:1401 [inline]
 __free_frozen_pages+0xc93/0xd90 mm/page_alloc.c:2952
 __slab_free+0x269/0x2c0 mm/slub.c:5926
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179
 kasan_quarantine_remove_cache+0x35d/0x380 mm/kasan/quarantine.c:388
 kmem_cache_shrink+0xd/0x20 mm/slab_common.c:611
 acpi_os_purge_cache+0x15/0x20 drivers/acpi/osl.c:1622
 acpi_purge_cached_objects+0xac/0x100 drivers/acpi/acpica/utxface.c:239
 acpi_initialize_objects+0x2e/0xb0 drivers/acpi/acpica/utxfinit.c:250
 acpi_bus_init+0xa8/0x360 drivers/acpi/bus.c:1397
 acpi_init+0xa1/0x1f0 drivers/acpi/bus.c:1486
 do_one_initcall+0x250/0x870 init/main.c:1360
 do_initcall_level+0x10a/0x1a0 init/main.c:1422
 do_initcalls+0x59/0xa0 init/main.c:1438
 kernel_init_freeable+0x29d/0x3e0 init/main.c:1673
 kernel_init+0x22/0x1d0 init/main.c:1563
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158

Memory state around the buggy address:
 ffff8880216a6280: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
 ffff8880216a6300: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
>ffff8880216a6380: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
                   ^
 ffff8880216a6400: fa fc fc fc fa fc fc fc 05 fc fc fc 05 fc fc fc
 ffff8880216a6480: 05 fc fc fc 05 fc fc fc 06 fc fc fc 06 fc fc fc
==================================================================