Extracting prog: 5m56.092606034s
Minimizing prog: 2h5m6.226536974s
Simplifying prog options: 5m33.015795951s
Extracting C: 2m45.258574739s
Simplifying C: 0s


extracting reproducer from 38 programs
testing a last program of every proc
single: executing 8 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-ioctl$BTRFS_IOC_DEV_INFO-syz_open_procfs-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-syz_open_dev$dri-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCONNECTOR-read$FUSE-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$exfat-mprotect-openat$iommufd
detailed listing:
executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00')
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$dri(0x0, 0x1f, 0x0)
syz_open_dev$dri(0x0, 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, <r5=>0x0})
read$FUSE(r1, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r1})
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x4800, &(0x7f0000001800)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRESOCT=r0, @ANYRES64, @ANYRESDEC=r5, @ANYRESHEX, @ANYRES32=r3, @ANYRESOCT], 0xfa, 0x1501, &(0x7f00000002c0)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000001240), 0x88000, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fb0-socket$inet_tcp-syz_init_net_socket$nl_generic-socket$inet6_udp-setsockopt$IP6T_SO_SET_REPLACE-syz_open_dev$dri-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_CREATE_DUMB-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-ioctl$DRM_IOCTL_MODE_GETFB2-ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD-ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE-close_range-setsockopt$inet_tcp_buf-ioctl$FBIOPUT_VSCREENINFO-openat$sequencer
detailed listing:
executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000002c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x1f8, 0xc8, 0x8, 0x0, 0x5803, 0x1f8, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@mh={{0x28}, {"df07"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x3, 0x4, 0x2, 'snmp_trap\x00', 'syz1\x00', {0x450d74d1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xb, 0x800, 0x2, 0x6, 0x9, 0xcb, 0xb1, 0xff]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6})
r5 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r6, <r7=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [<r11=>0x0], [0x0, 0x0, 0x0, 0x67], [], [0x0, 0x3]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000200)={r11, 0x0, <r12=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r12})
close_range(r3, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000540)="ae", 0x1)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000940)={0x60, 0x20, 0x2000, 0x0, 0x0, 0x2, 0x0, 0x0, {}, {0x0, 0x8}, {0x0, 0x0, 0x1}, {}, 0x1, 0x10, 0x800})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0xea982, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-getsockopt$EBT_SO_GET_INIT_ENTRIES-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-openat$tun-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program crashed: lost connection to test machine
single: successfully extracted reproducer
found reproducer with 28 syscalls
minimizing guilty program
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-getsockopt$EBT_SO_GET_INIT_ENTRIES-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-openat$tun-ioctl$TUNSETIFF
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-getsockopt$EBT_SO_GET_INIT_ENTRIES-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-openat$tun-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-getsockopt$EBT_SO_GET_INIT_ENTRIES-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program crashed: unregister_netdevice: waiting for DEV to become free
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-getsockopt$EBT_SO_GET_INIT_ENTRIES-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
listen(r0, 0x3)
accept(r0, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-getsockopt$EBT_SO_GET_INIT_ENTRIES-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-getsockopt$EBT_SO_GET_INIT_ENTRIES-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-getsockopt$EBT_SO_GET_INIT_ENTRIES-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-getsockopt$EBT_SO_GET_INIT_ENTRIES-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-getsockopt$EBT_SO_GET_INIT_ENTRIES-listen-accept-syz_emit_vhci-setsockopt$inet_int-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-getsockopt$EBT_SO_GET_INIT_ENTRIES-listen-accept-syz_emit_vhci-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-getsockopt$EBT_SO_GET_INIT_ENTRIES-listen-accept-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-getsockopt$EBT_SO_GET_INIT_ENTRIES-listen-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
listen(r1, 0x3)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-getsockopt$EBT_SO_GET_INIT_ENTRIES-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program crashed: BUG: unable to handle kernel paging request in lock_sock_nested
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r4=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r4})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r3=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r3})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r4=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r4})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r4=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r4})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(0xffffffffffffffff, 0x3)
accept(0xffffffffffffffff, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r4=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r4})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r0, 0x3)
accept(r0, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r4=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r4})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(0x0, 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r3=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r3})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(0x0, 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program crashed: unregister_netdevice: waiting for DEV to become free
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100))
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {0x0}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0x400000000010, 0x3, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
program did not crash
simplifying guilty program options
testing program (duration=2m16.980635137s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
testing program (duration=2m16.980635137s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_open_dev$vim2m-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-prlimit64-sched_setscheduler-getpid-sched_setscheduler-openat$cgroup_ro-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-listen-accept-syz_emit_vhci-setsockopt$inet_int-socket$inet6-syz_open_procfs-ioctl$NS_GET_OWNER_UID-clock_gettime-ioctl$MEDIA_IOC_REQUEST_ALLOC-ioctl$vim2m_VIDIOC_QBUF-ioctl$TUNSETIFF-socket
detailed listing:
executing program 0:
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x3)
accept(r1, &(0x7f0000000040)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB], 0x16)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)=0x64, 0x4)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=<r5=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x1000, 0x0, 0x4, 0x0, 0x820, {}, {0x2, 0x1, 0x81, 0x5, 0xa, 0x2, "6ed7d316"}, 0x401, 0x2, {&(0x7f00000000c0)}, 0x3, 0x0, r5})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

program did not crash
reproducing took 2h19m20.593549566s
repro crashed as (corrupted=false):
unregister_netdevice: waiting for syz_tun to become free. Usage count = 10
ref_tracker: syz_tun@000000006d2fb67d has 1/9 users at
     __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline]
     netdev_hold include/linux/netdevice.h:4165 [inline]
     dst_init+0xbc/0x3ec net/core/dst.c:52
     dst_alloc+0x118/0x168 net/core/dst.c:93
     rt_dst_alloc net/ipv4/route.c:1625 [inline]
     __mkroute_output net/ipv4/route.c:2618 [inline]
     ip_route_output_key_hash_rcu+0x116c/0x1e88 net/ipv4/route.c:2840
     ip_route_output_key_hash+0x174/0x294 net/ipv4/route.c:2669
     __ip_route_output_key include/net/route.h:141 [inline]
     ip_route_output_flow+0x3c/0x160 net/ipv4/route.c:2897
     ip_route_output_key include/net/route.h:151 [inline]
     geneve_link_config+0x174/0x550 drivers/net/geneve.c:1585
     geneve_newlink+0x134/0x1a8 drivers/net/geneve.c:1638
     rtnl_newlink_create+0x294/0x8e4 net/core/rtnetlink.c:3786
     __rtnl_newlink net/core/rtnetlink.c:3896 [inline]
     rtnl_newlink+0x1260/0x1960 net/core/rtnetlink.c:4011
     rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921
     netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542
     rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6948
     netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]
     netlink_unicast+0x668/0x8a4 net/netlink/af_netlink.c:1347
     netlink_sendmsg+0x7a4/0xa8c net/netlink/af_netlink.c:1891
     sock_sendmsg_nosec net/socket.c:711 [inline]
     __sock_sendmsg net/socket.c:726 [inline]
     __sys_sendto+0x360/0x4d8 net/socket.c:2197
     __do_sys_sendto net/socket.c:2204 [inline]
     __se_sys_sendto net/socket.c:2200 [inline]
     __arm64_sys_sendto+0xd8/0xf8 net/socket.c:2200

ref_tracker: syz_tun@000000006d2fb67d has 1/9 users at
     __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline]
     netdev_tracker_alloc include/linux/netdevice.h:4148 [inline]
     netdev_get_by_index+0x88/0xe4 net/core/dev.c:916
     fib6_nh_init+0x1ac/0x1c58 net/ipv6/route.c:3543
     ip6_route_info_create+0x790/0xefc net/ipv6/route.c:3809
     ip6_route_add+0x38/0x194 net/ipv6/route.c:3853
     addrconf_prefix_route net/ipv6/addrconf.c:2486 [inline]
     addrconf_add_linklocal+0x4cc/0x8b4 net/ipv6/addrconf.c:3338
     addrconf_addr_gen+0x3d4/0x8f4 net/ipv6/addrconf.c:3467
     addrconf_init_auto_addrs+0x798/0xca0
     addrconf_notify+0x8d0/0xce8 net/ipv6/addrconf.c:3764
     notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85
     raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453
     __dev_notify_flags+0x2c4/0x550
     dev_change_flags+0xd0/0x15c net/core/dev.c:9026
     do_setlink+0x9f0/0x3640 net/core/rtnetlink.c:3109
     rtnl_changelink net/core/rtnetlink.c:3723 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3874 [inline]
     rtnl_newlink+0x11b4/0x1960 net/core/rtnetlink.c:4011
     rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921
     netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542

ref_tracker: syz_tun@000000006d2fb67d has 1/9 users at
     __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline]
     netdev_tracker_alloc include/linux/netdevice.h:4148 [inline]
     netdev_get_by_index+0x88/0xe4 net/core/dev.c:916
     fib6_nh_init+0x1ac/0x1c58 net/ipv6/route.c:3543
     ip6_route_info_create+0x790/0xefc net/ipv6/route.c:3809
     addrconf_f6i_alloc+0x2c4/0x5d0 net/ipv6/route.c:4588
     ipv6_add_addr+0x4b4/0xde8 net/ipv6/addrconf.c:1120
     addrconf_add_linklocal+0x2c4/0x8b4 net/ipv6/addrconf.c:3336
     addrconf_addr_gen+0x3d4/0x8f4 net/ipv6/addrconf.c:3467
     addrconf_init_auto_addrs+0x798/0xca0
     addrconf_notify+0x8d0/0xce8 net/ipv6/addrconf.c:3764
     notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85
     raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453
     __dev_notify_flags+0x2c4/0x550
     dev_change_flags+0xd0/0x15c net/core/dev.c:9026
     do_setlink+0x9f0/0x3640 net/core/rtnetlink.c:3109
     rtnl_changelink net/core/rtnetlink.c:3723 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3874 [inline]
     rtnl_newlink+0x11b4/0x1960 net/core/rtnetlink.c:4011
     rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921

ref_tracker: syz_tun@000000006d2fb67d has 1/9 users at
     __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline]
     netdev_tracker_alloc include/linux/netdevice.h:4148 [inline]
     netdev_get_by_index+0x88/0xe4 net/core/dev.c:916
     fib6_nh_init+0x1ac/0x1c58 net/ipv6/route.c:3543
     ip6_route_info_create+0x790/0xefc net/ipv6/route.c:3809
     ip6_route_add+0x38/0x194 net/ipv6/route.c:3853
     addrconf_add_mroute net/ipv6/addrconf.c:2550 [inline]
     addrconf_add_dev+0x2b8/0x458 net/ipv6/addrconf.c:2568
     addrconf_dev_config net/ipv6/addrconf.c:3503 [inline]
     addrconf_init_auto_addrs+0x70c/0xca0 net/ipv6/addrconf.c:3591
     addrconf_notify+0x8d0/0xce8 net/ipv6/addrconf.c:3764
     notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85
     raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453
     __dev_notify_flags+0x2c4/0x550
     dev_change_flags+0xd0/0x15c net/core/dev.c:9026
     do_setlink+0x9f0/0x3640 net/core/rtnetlink.c:3109
     rtnl_changelink net/core/rtnetlink.c:3723 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3874 [inline]
     rtnl_newlink+0x11b4/0x1960 net/core/rtnetlink.c:4011
     rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921
     netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542
     rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6948

ref_tracker: syz_tun@000000006d2fb67d has 1/9 users at
     __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline]
     netdev_tracker_alloc include/linux/netdevice.h:4148 [inline]
     netdev_get_by_index+0x88/0xe4 net/core/dev.c:916
     fib6_nh_init+0x1ac/0x1c58 net/ipv6/route.c:3543
     ip6_route_info_create+0x790/0xefc net/ipv6/route.c:3809
     ip6_route_add+0x38/0x194 net/ipv6/route.c:3853
     addrconf_prefix_route net/ipv6/addrconf.c:2486 [inline]
     fixup_permanent_addr net/ipv6/addrconf.c:3622 [inline]
     addrconf_permanent_addr+0x670/0xaf0 net/ipv6/addrconf.c:3646
     addrconf_notify+0x7bc/0xce8 net/ipv6/addrconf.c:3718
     notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85
     raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453
     __dev_notify_flags+0x2c4/0x550
     dev_change_flags+0xd0/0x15c net/core/dev.c:9026
     do_setlink+0x9f0/0x3640 net/core/rtnetlink.c:3109
     rtnl_changelink net/core/rtnetlink.c:3723 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3874 [inline]
     rtnl_newlink+0x11b4/0x1960 net/core/rtnetlink.c:4011
     rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921
     netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542
     rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6948
     netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]
     netlink_unicast+0x668/0x8a4 net/netlink/af_netlink.c:1347

ref_tracker: syz_tun@000000006d2fb67d has 1/9 users at
     __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline]
     netdev_tracker_alloc include/linux/netdevice.h:4148 [inline]
     netdev_get_by_index+0x88/0xe4 net/core/dev.c:916
     fib6_nh_init+0x1ac/0x1c58 net/ipv6/route.c:3543
     ip6_route_info_create+0x790/0xefc net/ipv6/route.c:3809
     addrconf_f6i_alloc+0x2c4/0x5d0 net/ipv6/route.c:4588
     fixup_permanent_addr net/ipv6/addrconf.c:3607 [inline]
     addrconf_permanent_addr+0x244/0xaf0 net/ipv6/addrconf.c:3646
     addrconf_notify+0x7bc/0xce8 net/ipv6/addrconf.c:3718
     notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85
     raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453
     __dev_notify_flags+0x2c4/0x550
     dev_change_flags+0xd0/0x15c net/core/dev.c:9026
     do_setlink+0x9f0/0x3640 net/core/rtnetlink.c:3109
     rtnl_changelink net/core/rtnetlink.c:3723 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3874 [inline]
     rtnl_newlink+0x11b4/0x1960 net/core/rtnetlink.c:4011
     rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921
     netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542
     rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6948
     netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]
     netlink_unicast+0x668/0x8a4 net/netlink/af_netlink.c:1347

ref_tracker: syz_tun@000000006d2fb67d has 1/9 users at
     __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline]
     netdev_hold include/linux/netdevice.h:4165 [inline]
     fib_check_nh_nongw net/ipv4/fib_semantics.c:1217 [inline]
     fib_check_nh+0xa84/0x17a4 net/ipv4/fib_semantics.c:1237
     fib_create_info+0x11d0/0x1ea4 net/ipv4/fib_semantics.c:1533
     fib_table_insert+0x1a4/0x1570 net/ipv4/fib_trie.c:1231
     fib_magic+0x300/0x4b8 net/ipv4/fib_frontend.c:1112
     fib_add_ifaddr+0x33c/0x4ec net/ipv4/fib_frontend.c:1156
     fib_netdev_event+0x368/0x4ac net/ipv4/fib_frontend.c:1494
     notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85
     raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453
     __dev_notify_flags+0x2c4/0x550
     dev_change_flags+0xd0/0x15c net/core/dev.c:9026
     do_setlink+0x9f0/0x3640 net/core/rtnetlink.c:3109
     rtnl_changelink net/core/rtnetlink.c:3723 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3874 [inline]
     rtnl_newlink+0x11b4/0x1960 net/core/rtnetlink.c:4011
     rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921
     netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542
     rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6948
     netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]
     netlink_unicast+0x668/0x8a4 net/netlink/af_netlink.c:1347

ref_tracker: syz_tun@000000006d2fb67d has 1/9 users at
     __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline]
     netdev_hold include/linux/netdevice.h:4165 [inline]
     fib_check_nh_nongw net/ipv4/fib_semantics.c:1217 [inline]
     fib_check_nh+0xa84/0x17a4 net/ipv4/fib_semantics.c:1237
     fib_create_info+0x11d0/0x1ea4 net/ipv4/fib_semantics.c:1533
     fib_table_insert+0x1a4/0x1570 net/ipv4/fib_trie.c:1231
     fib_magic+0x300/0x4b8 net/ipv4/fib_frontend.c:1112
     fib_add_ifaddr+0x2e4/0x4ec net/ipv4/fib_frontend.c:1149
     fib_netdev_event+0x368/0x4ac net/ipv4/fib_frontend.c:1494
     notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85
     raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453
     __dev_notify_flags+0x2c4/0x550
     dev_change_flags+0xd0/0x15c net/core/dev.c:9026
     do_setlink+0x9f0/0x3640 net/core/rtnetlink.c:3109
     rtnl_changelink net/core/rtnetlink.c:3723 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3874 [inline]
     rtnl_newlink+0x11b4/0x1960 net/core/rtnetlink.c:4011
     rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921
     netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542
     rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6948
     netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]
     netlink_unicast+0x668/0x8a4 net/netlink/af_netlink.c:1347

ref_tracker: syz_tun@000000006d2fb67d has 1/9 users at
     __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline]
     netdev_tracker_alloc+0x68/0xb4 include/linux/netdevice.h:4148
     fib_create_info+0x138c/0x1ea4 net/ipv4/fib_semantics.c:1527
     fib_table_insert+0x1a4/0x1570 net/ipv4/fib_trie.c:1231
     fib_magic+0x300/0x4b8 net/ipv4/fib_frontend.c:1112
     fib_add_ifaddr+0x118/0x4ec net/ipv4/fib_frontend.c:1134
     fib_inetaddr_event+0x12c/0x200 net/ipv4/fib_frontend.c:1448
     notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85
     blocking_notifier_call_chain+0x70/0xa0 kernel/notifier.c:380
     __inet_insert_ifa+0x93c/0xb38 net/ipv4/devinet.c:575
     inet_rtm_newaddr+0xf94/0x188c net/ipv4/devinet.c:1010
     rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921
     netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542
     rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6948
     netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]
     netlink_unicast+0x668/0x8a4 net/netlink/af_netlink.c:1347
     netlink_sendmsg+0x7a4/0xa8c net/netlink/af_netlink.c:1891
     sock_sendmsg_nosec net/socket.c:711 [inline]
     __sock_sendmsg net/socket.c:726 [inline]
     __sys_sendto+0x360/0x4d8 net/socket.c:2197


final repro crashed as (corrupted=false):
unregister_netdevice: waiting for syz_tun to become free. Usage count = 10
ref_tracker: syz_tun@000000006d2fb67d has 1/9 users at
     __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline]
     netdev_hold include/linux/netdevice.h:4165 [inline]
     dst_init+0xbc/0x3ec net/core/dst.c:52
     dst_alloc+0x118/0x168 net/core/dst.c:93
     rt_dst_alloc net/ipv4/route.c:1625 [inline]
     __mkroute_output net/ipv4/route.c:2618 [inline]
     ip_route_output_key_hash_rcu+0x116c/0x1e88 net/ipv4/route.c:2840
     ip_route_output_key_hash+0x174/0x294 net/ipv4/route.c:2669
     __ip_route_output_key include/net/route.h:141 [inline]
     ip_route_output_flow+0x3c/0x160 net/ipv4/route.c:2897
     ip_route_output_key include/net/route.h:151 [inline]
     geneve_link_config+0x174/0x550 drivers/net/geneve.c:1585
     geneve_newlink+0x134/0x1a8 drivers/net/geneve.c:1638
     rtnl_newlink_create+0x294/0x8e4 net/core/rtnetlink.c:3786
     __rtnl_newlink net/core/rtnetlink.c:3896 [inline]
     rtnl_newlink+0x1260/0x1960 net/core/rtnetlink.c:4011
     rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921
     netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542
     rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6948
     netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]
     netlink_unicast+0x668/0x8a4 net/netlink/af_netlink.c:1347
     netlink_sendmsg+0x7a4/0xa8c net/netlink/af_netlink.c:1891
     sock_sendmsg_nosec net/socket.c:711 [inline]
     __sock_sendmsg net/socket.c:726 [inline]
     __sys_sendto+0x360/0x4d8 net/socket.c:2197
     __do_sys_sendto net/socket.c:2204 [inline]
     __se_sys_sendto net/socket.c:2200 [inline]
     __arm64_sys_sendto+0xd8/0xf8 net/socket.c:2200

ref_tracker: syz_tun@000000006d2fb67d has 1/9 users at
     __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline]
     netdev_tracker_alloc include/linux/netdevice.h:4148 [inline]
     netdev_get_by_index+0x88/0xe4 net/core/dev.c:916
     fib6_nh_init+0x1ac/0x1c58 net/ipv6/route.c:3543
     ip6_route_info_create+0x790/0xefc net/ipv6/route.c:3809
     ip6_route_add+0x38/0x194 net/ipv6/route.c:3853
     addrconf_prefix_route net/ipv6/addrconf.c:2486 [inline]
     addrconf_add_linklocal+0x4cc/0x8b4 net/ipv6/addrconf.c:3338
     addrconf_addr_gen+0x3d4/0x8f4 net/ipv6/addrconf.c:3467
     addrconf_init_auto_addrs+0x798/0xca0
     addrconf_notify+0x8d0/0xce8 net/ipv6/addrconf.c:3764
     notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85
     raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453
     __dev_notify_flags+0x2c4/0x550
     dev_change_flags+0xd0/0x15c net/core/dev.c:9026
     do_setlink+0x9f0/0x3640 net/core/rtnetlink.c:3109
     rtnl_changelink net/core/rtnetlink.c:3723 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3874 [inline]
     rtnl_newlink+0x11b4/0x1960 net/core/rtnetlink.c:4011
     rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921
     netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542

ref_tracker: syz_tun@000000006d2fb67d has 1/9 users at
     __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline]
     netdev_tracker_alloc include/linux/netdevice.h:4148 [inline]
     netdev_get_by_index+0x88/0xe4 net/core/dev.c:916
     fib6_nh_init+0x1ac/0x1c58 net/ipv6/route.c:3543
     ip6_route_info_create+0x790/0xefc net/ipv6/route.c:3809
     addrconf_f6i_alloc+0x2c4/0x5d0 net/ipv6/route.c:4588
     ipv6_add_addr+0x4b4/0xde8 net/ipv6/addrconf.c:1120
     addrconf_add_linklocal+0x2c4/0x8b4 net/ipv6/addrconf.c:3336
     addrconf_addr_gen+0x3d4/0x8f4 net/ipv6/addrconf.c:3467
     addrconf_init_auto_addrs+0x798/0xca0
     addrconf_notify+0x8d0/0xce8 net/ipv6/addrconf.c:3764
     notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85
     raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453
     __dev_notify_flags+0x2c4/0x550
     dev_change_flags+0xd0/0x15c net/core/dev.c:9026
     do_setlink+0x9f0/0x3640 net/core/rtnetlink.c:3109
     rtnl_changelink net/core/rtnetlink.c:3723 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3874 [inline]
     rtnl_newlink+0x11b4/0x1960 net/core/rtnetlink.c:4011
     rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921

ref_tracker: syz_tun@000000006d2fb67d has 1/9 users at
     __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline]
     netdev_tracker_alloc include/linux/netdevice.h:4148 [inline]
     netdev_get_by_index+0x88/0xe4 net/core/dev.c:916
     fib6_nh_init+0x1ac/0x1c58 net/ipv6/route.c:3543
     ip6_route_info_create+0x790/0xefc net/ipv6/route.c:3809
     ip6_route_add+0x38/0x194 net/ipv6/route.c:3853
     addrconf_add_mroute net/ipv6/addrconf.c:2550 [inline]
     addrconf_add_dev+0x2b8/0x458 net/ipv6/addrconf.c:2568
     addrconf_dev_config net/ipv6/addrconf.c:3503 [inline]
     addrconf_init_auto_addrs+0x70c/0xca0 net/ipv6/addrconf.c:3591
     addrconf_notify+0x8d0/0xce8 net/ipv6/addrconf.c:3764
     notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85
     raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453
     __dev_notify_flags+0x2c4/0x550
     dev_change_flags+0xd0/0x15c net/core/dev.c:9026
     do_setlink+0x9f0/0x3640 net/core/rtnetlink.c:3109
     rtnl_changelink net/core/rtnetlink.c:3723 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3874 [inline]
     rtnl_newlink+0x11b4/0x1960 net/core/rtnetlink.c:4011
     rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921
     netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542
     rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6948

ref_tracker: syz_tun@000000006d2fb67d has 1/9 users at
     __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline]
     netdev_tracker_alloc include/linux/netdevice.h:4148 [inline]
     netdev_get_by_index+0x88/0xe4 net/core/dev.c:916
     fib6_nh_init+0x1ac/0x1c58 net/ipv6/route.c:3543
     ip6_route_info_create+0x790/0xefc net/ipv6/route.c:3809
     ip6_route_add+0x38/0x194 net/ipv6/route.c:3853
     addrconf_prefix_route net/ipv6/addrconf.c:2486 [inline]
     fixup_permanent_addr net/ipv6/addrconf.c:3622 [inline]
     addrconf_permanent_addr+0x670/0xaf0 net/ipv6/addrconf.c:3646
     addrconf_notify+0x7bc/0xce8 net/ipv6/addrconf.c:3718
     notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85
     raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453
     __dev_notify_flags+0x2c4/0x550
     dev_change_flags+0xd0/0x15c net/core/dev.c:9026
     do_setlink+0x9f0/0x3640 net/core/rtnetlink.c:3109
     rtnl_changelink net/core/rtnetlink.c:3723 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3874 [inline]
     rtnl_newlink+0x11b4/0x1960 net/core/rtnetlink.c:4011
     rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921
     netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542
     rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6948
     netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]
     netlink_unicast+0x668/0x8a4 net/netlink/af_netlink.c:1347

ref_tracker: syz_tun@000000006d2fb67d has 1/9 users at
     __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline]
     netdev_tracker_alloc include/linux/netdevice.h:4148 [inline]
     netdev_get_by_index+0x88/0xe4 net/core/dev.c:916
     fib6_nh_init+0x1ac/0x1c58 net/ipv6/route.c:3543
     ip6_route_info_create+0x790/0xefc net/ipv6/route.c:3809
     addrconf_f6i_alloc+0x2c4/0x5d0 net/ipv6/route.c:4588
     fixup_permanent_addr net/ipv6/addrconf.c:3607 [inline]
     addrconf_permanent_addr+0x244/0xaf0 net/ipv6/addrconf.c:3646
     addrconf_notify+0x7bc/0xce8 net/ipv6/addrconf.c:3718
     notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85
     raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453
     __dev_notify_flags+0x2c4/0x550
     dev_change_flags+0xd0/0x15c net/core/dev.c:9026
     do_setlink+0x9f0/0x3640 net/core/rtnetlink.c:3109
     rtnl_changelink net/core/rtnetlink.c:3723 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3874 [inline]
     rtnl_newlink+0x11b4/0x1960 net/core/rtnetlink.c:4011
     rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921
     netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542
     rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6948
     netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]
     netlink_unicast+0x668/0x8a4 net/netlink/af_netlink.c:1347

ref_tracker: syz_tun@000000006d2fb67d has 1/9 users at
     __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline]
     netdev_hold include/linux/netdevice.h:4165 [inline]
     fib_check_nh_nongw net/ipv4/fib_semantics.c:1217 [inline]
     fib_check_nh+0xa84/0x17a4 net/ipv4/fib_semantics.c:1237
     fib_create_info+0x11d0/0x1ea4 net/ipv4/fib_semantics.c:1533
     fib_table_insert+0x1a4/0x1570 net/ipv4/fib_trie.c:1231
     fib_magic+0x300/0x4b8 net/ipv4/fib_frontend.c:1112
     fib_add_ifaddr+0x33c/0x4ec net/ipv4/fib_frontend.c:1156
     fib_netdev_event+0x368/0x4ac net/ipv4/fib_frontend.c:1494
     notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85
     raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453
     __dev_notify_flags+0x2c4/0x550
     dev_change_flags+0xd0/0x15c net/core/dev.c:9026
     do_setlink+0x9f0/0x3640 net/core/rtnetlink.c:3109
     rtnl_changelink net/core/rtnetlink.c:3723 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3874 [inline]
     rtnl_newlink+0x11b4/0x1960 net/core/rtnetlink.c:4011
     rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921
     netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542
     rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6948
     netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]
     netlink_unicast+0x668/0x8a4 net/netlink/af_netlink.c:1347

ref_tracker: syz_tun@000000006d2fb67d has 1/9 users at
     __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline]
     netdev_hold include/linux/netdevice.h:4165 [inline]
     fib_check_nh_nongw net/ipv4/fib_semantics.c:1217 [inline]
     fib_check_nh+0xa84/0x17a4 net/ipv4/fib_semantics.c:1237
     fib_create_info+0x11d0/0x1ea4 net/ipv4/fib_semantics.c:1533
     fib_table_insert+0x1a4/0x1570 net/ipv4/fib_trie.c:1231
     fib_magic+0x300/0x4b8 net/ipv4/fib_frontend.c:1112
     fib_add_ifaddr+0x2e4/0x4ec net/ipv4/fib_frontend.c:1149
     fib_netdev_event+0x368/0x4ac net/ipv4/fib_frontend.c:1494
     notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85
     raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453
     __dev_notify_flags+0x2c4/0x550
     dev_change_flags+0xd0/0x15c net/core/dev.c:9026
     do_setlink+0x9f0/0x3640 net/core/rtnetlink.c:3109
     rtnl_changelink net/core/rtnetlink.c:3723 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3874 [inline]
     rtnl_newlink+0x11b4/0x1960 net/core/rtnetlink.c:4011
     rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921
     netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542
     rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6948
     netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]
     netlink_unicast+0x668/0x8a4 net/netlink/af_netlink.c:1347

ref_tracker: syz_tun@000000006d2fb67d has 1/9 users at
     __netdev_tracker_alloc include/linux/netdevice.h:4136 [inline]
     netdev_tracker_alloc+0x68/0xb4 include/linux/netdevice.h:4148
     fib_create_info+0x138c/0x1ea4 net/ipv4/fib_semantics.c:1527
     fib_table_insert+0x1a4/0x1570 net/ipv4/fib_trie.c:1231
     fib_magic+0x300/0x4b8 net/ipv4/fib_frontend.c:1112
     fib_add_ifaddr+0x118/0x4ec net/ipv4/fib_frontend.c:1134
     fib_inetaddr_event+0x12c/0x200 net/ipv4/fib_frontend.c:1448
     notifier_call_chain+0x1c4/0x550 kernel/notifier.c:85
     blocking_notifier_call_chain+0x70/0xa0 kernel/notifier.c:380
     __inet_insert_ifa+0x93c/0xb38 net/ipv4/devinet.c:575
     inet_rtm_newaddr+0xf94/0x188c net/ipv4/devinet.c:1010
     rtnetlink_rcv_msg+0x670/0xa9c net/core/rtnetlink.c:6921
     netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2542
     rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6948
     netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]
     netlink_unicast+0x668/0x8a4 net/netlink/af_netlink.c:1347
     netlink_sendmsg+0x7a4/0xa8c net/netlink/af_netlink.c:1891
     sock_sendmsg_nosec net/socket.c:711 [inline]
     __sock_sendmsg net/socket.c:726 [inline]
     __sys_sendto+0x360/0x4d8 net/socket.c:2197