Extracting prog: 9m19.84532185s
Minimizing prog: 10m31.964925044s
Simplifying prog options: 0s
Extracting C: 46.852952882s
Simplifying C: 7m49.302332247s


30 programs, timeouts [15s 1m40s 6m0s]
extracting reproducer from 30 programs
single: executing 5 programs separately with timeout 15s
testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT
detailed listing:
executing program 0:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r0, 0x8004b706, 0x0)

program did not crash
testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="cb2440ac9e0c"}]}, 0x44}}, 0x0)

program did not crash
testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-socket-syz_emit_ethernet-socket-ioctl$sock_SIOCGIFINDEX-setsockopt$sock_int-setsockopt$SO_TIMESTAMPING-bind$packet-sendto$packet-recvmsg-socket$nl_route-socket$netlink-sendmsg$netlink-socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_TRAP_GET-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_SET_INTERFACE-socket$nl_generic-unshare-socket-bind$inet-socket$inet_udp-socket-setsockopt$netlink_NETLINK_TX_RING-syz_genetlink_get_family_id$ethtool-sendmsg$ETHTOOL_MSG_COALESCE_SET-syz_genetlink_get_family_id$mptcp-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x0, 0x0, 0x0)
syz_emit_ethernet(0x1e6, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @dccp_packet={0x2, 0x6, "100c27", 0x1b0, 0x21, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@dstopts={0x2c, 0x17, '\x00', [@generic={0x5, 0xb4, "ca6f082a0cdcf9ee1b3cca743e94b4e18ee7b22f1a1a6a0192aa71f2c9620e555022f04ecffa1d0e8c7d2f55fe48ed9a6bfffdc390d21e0c4ed3cce9c9ac94584817bace79562245847928b3f7f90991adedf24f17db8517d68d4348f38a78d9d4937133b61a289993ae76e8d2b5117439c30aea139f3c6da6f243d16feffd346dd07112f260dbf6c36f1b01c905ac3a0e4dd35d7127369ae495f9bd3b101b5088e297cf0f05be7b69cd6dce0a891786989a6f99"}, @enc_lim={0x4, 0x1, 0x3}]}, @fragment={0x1d, 0x0, 0x0, 0x0, 0x0, 0x4, 0x67}, @fragment={0x2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x66}, @fragment={0xb4, 0x0, 0x7, 0x1, 0x0, 0x0, 0x66}], {{0x4e21, 0x4e21, 0x4, 0x1, 0xd, 0x0, 0x0, 0x7, 0x4, "700ea0", 0xfa, "e7fede"}, "027b390a41e31e3dc260f0f8a396a3d2bd9258ca2da0fcd5816e4706787be95c9e375058491661e4b1ecd069865a966331e2e8f844df453938a806e6b9fd3d8dcc65fafa9691de50a055a4013afc7a9f98d540cf6b41449e860be0eae8a6f6c245e0054c78b15231e57487ced34d06f7cdec3c11783e7c8cf20d122ee4b82700783d7469dba2806db2a17adc0f295a419327501b892eb4a8e61e7d4bad074b053dd10f7cb8eace258e5cdfcad2ce8e4ea03645a59422352be8f0eff8c3f7666e"}}}}}}, 0x0)
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', <r1=>0x0})
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x3, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x735, 0x4)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$packet(r0, &(0x7f00000002c0)="fb57975e267951722b395d37bac8", 0xe, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1800000056000106000000000000000007"], 0x18}], 0x1}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3)
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0xc8, r4, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xc8}}, 0x40000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050009"], 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6020400)
r7 = socket(0xa, 0x2, 0x3a)
bind$inet(r7, 0x0, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
r9 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x8004}, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000003b34eea3391ad7b1fb32a34440769a39c9d6d47f85d9d9e54006b0115215b1992874e686bb1bd9ee928d43fb02d89d51fac1e9505d64f23af8021d0e274ff98a64322ff6c4c0a8e99d19a5f426a3145c9f43d2415fcfa6ae8c46c6937bf3f313be10f2c3ab0e3230c5c4e044690ca478434bfc832a5677dd258e0e5ed7620ef58583728205238192f96092af1c5096b41a8773ceffbf366477a479bc25532fbf4bf9976285fc02cc88c01d267ab11cea99c1bf5bb8e8f6693466e24cc2c57193e154803021bc869107f5a630", @ANYRES16=r10, @ANYBLOB="130d00000000000000000a02000004000180"], 0x18}}, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00'})

program did not crash
testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): write$binfmt_script-ioctl$FS_IOC_RESVSP-socket$alg-bind$alg-setsockopt$inet6_int-bind$inet6-socket$kcm-sendmsg$inet-accept4-socket$alg-sendmsg$kcm-recvmsg$kcm-close
detailed listing:
executing program 0:
write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0x4)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x5c000000, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e17aa31076b876c1dfff0007ea60864160af36504001a0038001d007e31a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f005807}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)="a99ca450ae1ab92b2123bc223f22c8d438a5a7d1354ddfa01a37c69080dd0c679727946fa349f138fcfb61949586f586f61fa76cc6a2239c9c36ae545789f7046a914c4dca724861aa343e", 0x4b}], 0x1}, 0x8010)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/195, 0x4b}], 0x1}, 0x0)
close(0xffffffffffffffff)

program did not crash
testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$key-sendmsg$key-socket$inet6_sctp-socket$netlink-socket$nl_netfilter-ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD-mmap-getsockopt$inet_mreqn-socket$nl_route-sendmsg$nl_route-syz_init_net_socket$bt_sco-socket$nl_route-ioctl$sock_SIOCETHTOOL-getsockopt$bt_BT_DEFER_SETUP-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_PROG_TEST_RUN-sendto-setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR-accept4$llc-getsockname-sendmsg$NFULNL_MSG_CONFIG-socketpair$tipc-ioctl$sock_SIOCGIFINDEX-socket-openat$ppp-sendmsg$nl_route
detailed listing:
executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300020c0007002abd70000000000002000800080000006d0000000000000003000600000000000200000000000000000000000000000002000100000000000000080000000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)=@xdp={0x2c, 0x0, 0x0, 0x12}, 0x80)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100), 0x4)
accept4$llc(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0)=0x10, 0x80000)
getsockname(r1, 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
socketpair$tipc(0x1e, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = socket(0x0, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 15s
testing program (duration=22s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 30, 27, 27, 13, 30, 27, 13, 30, 27, 30, 13, 27, 30, 13, 27, 13, 5, 3, 30, 3, 5, 5, 6, 1, 5, 4, 3, 2, 2]
detailed listing:
executing program 3:
write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0x4)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x5c000000, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e17aa31076b876c1dfff0007ea60864160af36504001a0038001d007e31a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f005807}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)="a99ca450ae1ab92b2123bc223f22c8d438a5a7d1354ddfa01a37c69080dd0c679727946fa349f138fcfb61949586f586f61fa76cc6a2239c9c36ae545789f7046a914c4dca724861aa343e", 0x4b}], 0x1}, 0x8010)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/195, 0x4b}], 0x1}, 0x0)
close(0xffffffffffffffff)
executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x0, 0x0, 0x0)
syz_emit_ethernet(0x1e6, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @dccp_packet={0x2, 0x6, "100c27", 0x1b0, 0x21, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@dstopts={0x2c, 0x17, '\x00', [@generic={0x5, 0xb4, "ca6f082a0cdcf9ee1b3cca743e94b4e18ee7b22f1a1a6a0192aa71f2c9620e555022f04ecffa1d0e8c7d2f55fe48ed9a6bfffdc390d21e0c4ed3cce9c9ac94584817bace79562245847928b3f7f90991adedf24f17db8517d68d4348f38a78d9d4937133b61a289993ae76e8d2b5117439c30aea139f3c6da6f243d16feffd346dd07112f260dbf6c36f1b01c905ac3a0e4dd35d7127369ae495f9bd3b101b5088e297cf0f05be7b69cd6dce0a891786989a6f99"}, @enc_lim={0x4, 0x1, 0x3}]}, @fragment={0x1d, 0x0, 0x0, 0x0, 0x0, 0x4, 0x67}, @fragment={0x2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x66}, @fragment={0xb4, 0x0, 0x7, 0x1, 0x0, 0x0, 0x66}], {{0x4e21, 0x4e21, 0x4, 0x1, 0xd, 0x0, 0x0, 0x7, 0x4, "700ea0", 0xfa, "e7fede"}, "027b390a41e31e3dc260f0f8a396a3d2bd9258ca2da0fcd5816e4706787be95c9e375058491661e4b1ecd069865a966331e2e8f844df453938a806e6b9fd3d8dcc65fafa9691de50a055a4013afc7a9f98d540cf6b41449e860be0eae8a6f6c245e0054c78b15231e57487ced34d06f7cdec3c11783e7c8cf20d122ee4b82700783d7469dba2806db2a17adc0f295a419327501b892eb4a8e61e7d4bad074b053dd10f7cb8eace258e5cdfcad2ce8e4ea03645a59422352be8f0eff8c3f7666e"}}}}}}, 0x0)
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', <r1=>0x0})
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x3, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x735, 0x4)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$packet(r0, &(0x7f00000002c0)="fb57975e267951722b395d37bac8", 0xe, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1800000056000106000000000000000007"], 0x18}], 0x1}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3)
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0xc8, r4, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xc8}}, 0x40000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050009"], 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6020400)
r7 = socket(0xa, 0x2, 0x3a)
bind$inet(r7, 0x0, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
r9 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x8004}, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000003b34eea3391ad7b1fb32a34440769a39c9d6d47f85d9d9e54006b0115215b1992874e686bb1bd9ee928d43fb02d89d51fac1e9505d64f23af8021d0e274ff98a64322ff6c4c0a8e99d19a5f426a3145c9f43d2415fcfa6ae8c46c6937bf3f313be10f2c3ab0e3230c5c4e044690ca478434bfc832a5677dd258e0e5ed7620ef58583728205238192f96092af1c5096b41a8773ceffbf366477a479bc25532fbf4bf9976285fc02cc88c01d267ab11cea99c1bf5bb8e8f6693466e24cc2c57193e154803021bc869107f5a630", @ANYRES16=r10, @ANYBLOB="130d00000000000000000a02000004000180"], 0x18}}, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300020c0007002abd70000000000002000800080000006d0000000000000003000600000000000200000000000000000000000000000002000100000000000000080000000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)=@xdp={0x2c, 0x0, 0x0, 0x12}, 0x80)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100), 0x4)
accept4$llc(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0)=0x10, 0x80000)
getsockname(r1, 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
socketpair$tipc(0x1e, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = socket(0x0, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300020c0007002abd70000000000002000800080000006d0000000000000003000600000000000200000000000000000000000000000002000100000000000000080000000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)=@xdp={0x2c, 0x0, 0x0, 0x12}, 0x80)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100), 0x4)
accept4$llc(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0)=0x10, 0x80000)
getsockname(r1, 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
socketpair$tipc(0x1e, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = socket(0x0, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
executing program 3:
write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0x4)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x5c000000, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e17aa31076b876c1dfff0007ea60864160af36504001a0038001d007e31a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f005807}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)="a99ca450ae1ab92b2123bc223f22c8d438a5a7d1354ddfa01a37c69080dd0c679727946fa349f138fcfb61949586f586f61fa76cc6a2239c9c36ae545789f7046a914c4dca724861aa343e", 0x4b}], 0x1}, 0x8010)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/195, 0x4b}], 0x1}, 0x0)
close(0xffffffffffffffff)
executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x0, 0x0, 0x0)
syz_emit_ethernet(0x1e6, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @dccp_packet={0x2, 0x6, "100c27", 0x1b0, 0x21, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@dstopts={0x2c, 0x17, '\x00', [@generic={0x5, 0xb4, "ca6f082a0cdcf9ee1b3cca743e94b4e18ee7b22f1a1a6a0192aa71f2c9620e555022f04ecffa1d0e8c7d2f55fe48ed9a6bfffdc390d21e0c4ed3cce9c9ac94584817bace79562245847928b3f7f90991adedf24f17db8517d68d4348f38a78d9d4937133b61a289993ae76e8d2b5117439c30aea139f3c6da6f243d16feffd346dd07112f260dbf6c36f1b01c905ac3a0e4dd35d7127369ae495f9bd3b101b5088e297cf0f05be7b69cd6dce0a891786989a6f99"}, @enc_lim={0x4, 0x1, 0x3}]}, @fragment={0x1d, 0x0, 0x0, 0x0, 0x0, 0x4, 0x67}, @fragment={0x2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x66}, @fragment={0xb4, 0x0, 0x7, 0x1, 0x0, 0x0, 0x66}], {{0x4e21, 0x4e21, 0x4, 0x1, 0xd, 0x0, 0x0, 0x7, 0x4, "700ea0", 0xfa, "e7fede"}, "027b390a41e31e3dc260f0f8a396a3d2bd9258ca2da0fcd5816e4706787be95c9e375058491661e4b1ecd069865a966331e2e8f844df453938a806e6b9fd3d8dcc65fafa9691de50a055a4013afc7a9f98d540cf6b41449e860be0eae8a6f6c245e0054c78b15231e57487ced34d06f7cdec3c11783e7c8cf20d122ee4b82700783d7469dba2806db2a17adc0f295a419327501b892eb4a8e61e7d4bad074b053dd10f7cb8eace258e5cdfcad2ce8e4ea03645a59422352be8f0eff8c3f7666e"}}}}}}, 0x0)
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', <r1=>0x0})
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x3, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x735, 0x4)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$packet(r0, &(0x7f00000002c0)="fb57975e267951722b395d37bac8", 0xe, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1800000056000106000000000000000007"], 0x18}], 0x1}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3)
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0xc8, r4, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xc8}}, 0x40000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050009"], 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6020400)
r7 = socket(0xa, 0x2, 0x3a)
bind$inet(r7, 0x0, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
r9 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x8004}, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000003b34eea3391ad7b1fb32a34440769a39c9d6d47f85d9d9e54006b0115215b1992874e686bb1bd9ee928d43fb02d89d51fac1e9505d64f23af8021d0e274ff98a64322ff6c4c0a8e99d19a5f426a3145c9f43d2415fcfa6ae8c46c6937bf3f313be10f2c3ab0e3230c5c4e044690ca478434bfc832a5677dd258e0e5ed7620ef58583728205238192f96092af1c5096b41a8773ceffbf366477a479bc25532fbf4bf9976285fc02cc88c01d267ab11cea99c1bf5bb8e8f6693466e24cc2c57193e154803021bc869107f5a630", @ANYRES16=r10, @ANYBLOB="130d00000000000000000a02000004000180"], 0x18}}, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300020c0007002abd70000000000002000800080000006d0000000000000003000600000000000200000000000000000000000000000002000100000000000000080000000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)=@xdp={0x2c, 0x0, 0x0, 0x12}, 0x80)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100), 0x4)
accept4$llc(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0)=0x10, 0x80000)
getsockname(r1, 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
socketpair$tipc(0x1e, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = socket(0x0, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
executing program 3:
write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0x4)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x5c000000, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e17aa31076b876c1dfff0007ea60864160af36504001a0038001d007e31a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f005807}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)="a99ca450ae1ab92b2123bc223f22c8d438a5a7d1354ddfa01a37c69080dd0c679727946fa349f138fcfb61949586f586f61fa76cc6a2239c9c36ae545789f7046a914c4dca724861aa343e", 0x4b}], 0x1}, 0x8010)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/195, 0x4b}], 0x1}, 0x0)
close(0xffffffffffffffff)
executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x0, 0x0, 0x0)
syz_emit_ethernet(0x1e6, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @dccp_packet={0x2, 0x6, "100c27", 0x1b0, 0x21, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@dstopts={0x2c, 0x17, '\x00', [@generic={0x5, 0xb4, "ca6f082a0cdcf9ee1b3cca743e94b4e18ee7b22f1a1a6a0192aa71f2c9620e555022f04ecffa1d0e8c7d2f55fe48ed9a6bfffdc390d21e0c4ed3cce9c9ac94584817bace79562245847928b3f7f90991adedf24f17db8517d68d4348f38a78d9d4937133b61a289993ae76e8d2b5117439c30aea139f3c6da6f243d16feffd346dd07112f260dbf6c36f1b01c905ac3a0e4dd35d7127369ae495f9bd3b101b5088e297cf0f05be7b69cd6dce0a891786989a6f99"}, @enc_lim={0x4, 0x1, 0x3}]}, @fragment={0x1d, 0x0, 0x0, 0x0, 0x0, 0x4, 0x67}, @fragment={0x2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x66}, @fragment={0xb4, 0x0, 0x7, 0x1, 0x0, 0x0, 0x66}], {{0x4e21, 0x4e21, 0x4, 0x1, 0xd, 0x0, 0x0, 0x7, 0x4, "700ea0", 0xfa, "e7fede"}, "027b390a41e31e3dc260f0f8a396a3d2bd9258ca2da0fcd5816e4706787be95c9e375058491661e4b1ecd069865a966331e2e8f844df453938a806e6b9fd3d8dcc65fafa9691de50a055a4013afc7a9f98d540cf6b41449e860be0eae8a6f6c245e0054c78b15231e57487ced34d06f7cdec3c11783e7c8cf20d122ee4b82700783d7469dba2806db2a17adc0f295a419327501b892eb4a8e61e7d4bad074b053dd10f7cb8eace258e5cdfcad2ce8e4ea03645a59422352be8f0eff8c3f7666e"}}}}}}, 0x0)
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', <r1=>0x0})
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x3, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x735, 0x4)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$packet(r0, &(0x7f00000002c0)="fb57975e267951722b395d37bac8", 0xe, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1800000056000106000000000000000007"], 0x18}], 0x1}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3)
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0xc8, r4, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xc8}}, 0x40000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050009"], 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6020400)
r7 = socket(0xa, 0x2, 0x3a)
bind$inet(r7, 0x0, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
r9 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x8004}, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000003b34eea3391ad7b1fb32a34440769a39c9d6d47f85d9d9e54006b0115215b1992874e686bb1bd9ee928d43fb02d89d51fac1e9505d64f23af8021d0e274ff98a64322ff6c4c0a8e99d19a5f426a3145c9f43d2415fcfa6ae8c46c6937bf3f313be10f2c3ab0e3230c5c4e044690ca478434bfc832a5677dd258e0e5ed7620ef58583728205238192f96092af1c5096b41a8773ceffbf366477a479bc25532fbf4bf9976285fc02cc88c01d267ab11cea99c1bf5bb8e8f6693466e24cc2c57193e154803021bc869107f5a630", @ANYRES16=r10, @ANYBLOB="130d00000000000000000a02000004000180"], 0x18}}, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300020c0007002abd70000000000002000800080000006d0000000000000003000600000000000200000000000000000000000000000002000100000000000000080000000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)=@xdp={0x2c, 0x0, 0x0, 0x12}, 0x80)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100), 0x4)
accept4$llc(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0)=0x10, 0x80000)
getsockname(r1, 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
socketpair$tipc(0x1e, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = socket(0x0, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x0, 0x0, 0x0)
syz_emit_ethernet(0x1e6, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @dccp_packet={0x2, 0x6, "100c27", 0x1b0, 0x21, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@dstopts={0x2c, 0x17, '\x00', [@generic={0x5, 0xb4, "ca6f082a0cdcf9ee1b3cca743e94b4e18ee7b22f1a1a6a0192aa71f2c9620e555022f04ecffa1d0e8c7d2f55fe48ed9a6bfffdc390d21e0c4ed3cce9c9ac94584817bace79562245847928b3f7f90991adedf24f17db8517d68d4348f38a78d9d4937133b61a289993ae76e8d2b5117439c30aea139f3c6da6f243d16feffd346dd07112f260dbf6c36f1b01c905ac3a0e4dd35d7127369ae495f9bd3b101b5088e297cf0f05be7b69cd6dce0a891786989a6f99"}, @enc_lim={0x4, 0x1, 0x3}]}, @fragment={0x1d, 0x0, 0x0, 0x0, 0x0, 0x4, 0x67}, @fragment={0x2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x66}, @fragment={0xb4, 0x0, 0x7, 0x1, 0x0, 0x0, 0x66}], {{0x4e21, 0x4e21, 0x4, 0x1, 0xd, 0x0, 0x0, 0x7, 0x4, "700ea0", 0xfa, "e7fede"}, "027b390a41e31e3dc260f0f8a396a3d2bd9258ca2da0fcd5816e4706787be95c9e375058491661e4b1ecd069865a966331e2e8f844df453938a806e6b9fd3d8dcc65fafa9691de50a055a4013afc7a9f98d540cf6b41449e860be0eae8a6f6c245e0054c78b15231e57487ced34d06f7cdec3c11783e7c8cf20d122ee4b82700783d7469dba2806db2a17adc0f295a419327501b892eb4a8e61e7d4bad074b053dd10f7cb8eace258e5cdfcad2ce8e4ea03645a59422352be8f0eff8c3f7666e"}}}}}}, 0x0)
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', <r1=>0x0})
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x3, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x735, 0x4)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$packet(r0, &(0x7f00000002c0)="fb57975e267951722b395d37bac8", 0xe, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1800000056000106000000000000000007"], 0x18}], 0x1}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3)
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0xc8, r4, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xc8}}, 0x40000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050009"], 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6020400)
r7 = socket(0xa, 0x2, 0x3a)
bind$inet(r7, 0x0, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
r9 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x8004}, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000003b34eea3391ad7b1fb32a34440769a39c9d6d47f85d9d9e54006b0115215b1992874e686bb1bd9ee928d43fb02d89d51fac1e9505d64f23af8021d0e274ff98a64322ff6c4c0a8e99d19a5f426a3145c9f43d2415fcfa6ae8c46c6937bf3f313be10f2c3ab0e3230c5c4e044690ca478434bfc832a5677dd258e0e5ed7620ef58583728205238192f96092af1c5096b41a8773ceffbf366477a479bc25532fbf4bf9976285fc02cc88c01d267ab11cea99c1bf5bb8e8f6693466e24cc2c57193e154803021bc869107f5a630", @ANYRES16=r10, @ANYBLOB="130d00000000000000000a02000004000180"], 0x18}}, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
executing program 3:
write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0x4)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x5c000000, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e17aa31076b876c1dfff0007ea60864160af36504001a0038001d007e31a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f005807}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)="a99ca450ae1ab92b2123bc223f22c8d438a5a7d1354ddfa01a37c69080dd0c679727946fa349f138fcfb61949586f586f61fa76cc6a2239c9c36ae545789f7046a914c4dca724861aa343e", 0x4b}], 0x1}, 0x8010)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/195, 0x4b}], 0x1}, 0x0)
close(0xffffffffffffffff)
executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300020c0007002abd70000000000002000800080000006d0000000000000003000600000000000200000000000000000000000000000002000100000000000000080000000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)=@xdp={0x2c, 0x0, 0x0, 0x12}, 0x80)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100), 0x4)
accept4$llc(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0)=0x10, 0x80000)
getsockname(r1, 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
socketpair$tipc(0x1e, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = socket(0x0, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x0, 0x0, 0x0)
syz_emit_ethernet(0x1e6, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @dccp_packet={0x2, 0x6, "100c27", 0x1b0, 0x21, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@dstopts={0x2c, 0x17, '\x00', [@generic={0x5, 0xb4, "ca6f082a0cdcf9ee1b3cca743e94b4e18ee7b22f1a1a6a0192aa71f2c9620e555022f04ecffa1d0e8c7d2f55fe48ed9a6bfffdc390d21e0c4ed3cce9c9ac94584817bace79562245847928b3f7f90991adedf24f17db8517d68d4348f38a78d9d4937133b61a289993ae76e8d2b5117439c30aea139f3c6da6f243d16feffd346dd07112f260dbf6c36f1b01c905ac3a0e4dd35d7127369ae495f9bd3b101b5088e297cf0f05be7b69cd6dce0a891786989a6f99"}, @enc_lim={0x4, 0x1, 0x3}]}, @fragment={0x1d, 0x0, 0x0, 0x0, 0x0, 0x4, 0x67}, @fragment={0x2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x66}, @fragment={0xb4, 0x0, 0x7, 0x1, 0x0, 0x0, 0x66}], {{0x4e21, 0x4e21, 0x4, 0x1, 0xd, 0x0, 0x0, 0x7, 0x4, "700ea0", 0xfa, "e7fede"}, "027b390a41e31e3dc260f0f8a396a3d2bd9258ca2da0fcd5816e4706787be95c9e375058491661e4b1ecd069865a966331e2e8f844df453938a806e6b9fd3d8dcc65fafa9691de50a055a4013afc7a9f98d540cf6b41449e860be0eae8a6f6c245e0054c78b15231e57487ced34d06f7cdec3c11783e7c8cf20d122ee4b82700783d7469dba2806db2a17adc0f295a419327501b892eb4a8e61e7d4bad074b053dd10f7cb8eace258e5cdfcad2ce8e4ea03645a59422352be8f0eff8c3f7666e"}}}}}}, 0x0)
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', <r1=>0x0})
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x3, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x735, 0x4)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$packet(r0, &(0x7f00000002c0)="fb57975e267951722b395d37bac8", 0xe, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1800000056000106000000000000000007"], 0x18}], 0x1}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3)
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0xc8, r4, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xc8}}, 0x40000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050009"], 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6020400)
r7 = socket(0xa, 0x2, 0x3a)
bind$inet(r7, 0x0, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
r9 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x8004}, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000003b34eea3391ad7b1fb32a34440769a39c9d6d47f85d9d9e54006b0115215b1992874e686bb1bd9ee928d43fb02d89d51fac1e9505d64f23af8021d0e274ff98a64322ff6c4c0a8e99d19a5f426a3145c9f43d2415fcfa6ae8c46c6937bf3f313be10f2c3ab0e3230c5c4e044690ca478434bfc832a5677dd258e0e5ed7620ef58583728205238192f96092af1c5096b41a8773ceffbf366477a479bc25532fbf4bf9976285fc02cc88c01d267ab11cea99c1bf5bb8e8f6693466e24cc2c57193e154803021bc869107f5a630", @ANYRES16=r10, @ANYBLOB="130d00000000000000000a02000004000180"], 0x18}}, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
executing program 3:
write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0x4)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x5c000000, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e17aa31076b876c1dfff0007ea60864160af36504001a0038001d007e31a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f005807}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)="a99ca450ae1ab92b2123bc223f22c8d438a5a7d1354ddfa01a37c69080dd0c679727946fa349f138fcfb61949586f586f61fa76cc6a2239c9c36ae545789f7046a914c4dca724861aa343e", 0x4b}], 0x1}, 0x8010)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/195, 0x4b}], 0x1}, 0x0)
close(0xffffffffffffffff)
executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300020c0007002abd70000000000002000800080000006d0000000000000003000600000000000200000000000000000000000000000002000100000000000000080000000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x0, 0x84)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)=@xdp={0x2c, 0x0, 0x0, 0x12}, 0x80)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100), 0x4)
accept4$llc(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0)=0x10, 0x80000)
getsockname(r1, 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
socketpair$tipc(0x1e, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = socket(0x0, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
executing program 3:
write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0x4)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x5c000000, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e17aa31076b876c1dfff0007ea60864160af36504001a0038001d007e31a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f005807}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)="a99ca450ae1ab92b2123bc223f22c8d438a5a7d1354ddfa01a37c69080dd0c679727946fa349f138fcfb61949586f586f61fa76cc6a2239c9c36ae545789f7046a914c4dca724861aa343e", 0x4b}], 0x1}, 0x8010)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/195, 0x4b}], 0x1}, 0x0)
close(0xffffffffffffffff)
executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4)
sendmsg$unix(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000280)="82", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
recvmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)
executing program 0:
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x12)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009509000000000000b702000000000000739af8ff00000000b509fdff00000000dbaaf8ff00000000bf8600000000000007080000fffdffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000000700000076000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
socket(0x0, 0x0, 0x0)
syz_emit_ethernet(0x1e6, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @dccp_packet={0x2, 0x6, "100c27", 0x1b0, 0x21, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@dstopts={0x2c, 0x17, '\x00', [@generic={0x5, 0xb4, "ca6f082a0cdcf9ee1b3cca743e94b4e18ee7b22f1a1a6a0192aa71f2c9620e555022f04ecffa1d0e8c7d2f55fe48ed9a6bfffdc390d21e0c4ed3cce9c9ac94584817bace79562245847928b3f7f90991adedf24f17db8517d68d4348f38a78d9d4937133b61a289993ae76e8d2b5117439c30aea139f3c6da6f243d16feffd346dd07112f260dbf6c36f1b01c905ac3a0e4dd35d7127369ae495f9bd3b101b5088e297cf0f05be7b69cd6dce0a891786989a6f99"}, @enc_lim={0x4, 0x1, 0x3}]}, @fragment={0x1d, 0x0, 0x0, 0x0, 0x0, 0x4, 0x67}, @fragment={0x2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x66}, @fragment={0xb4, 0x0, 0x7, 0x1, 0x0, 0x0, 0x66}], {{0x4e21, 0x4e21, 0x4, 0x1, 0xd, 0x0, 0x0, 0x7, 0x4, "700ea0", 0xfa, "e7fede"}, "027b390a41e31e3dc260f0f8a396a3d2bd9258ca2da0fcd5816e4706787be95c9e375058491661e4b1ecd069865a966331e2e8f844df453938a806e6b9fd3d8dcc65fafa9691de50a055a4013afc7a9f98d540cf6b41449e860be0eae8a6f6c245e0054c78b15231e57487ced34d06f7cdec3c11783e7c8cf20d122ee4b82700783d7469dba2806db2a17adc0f295a419327501b892eb4a8e61e7d4bad074b053dd10f7cb8eace258e5cdfcad2ce8e4ea03645a59422352be8f0eff8c3f7666e"}}}}}}, 0x0)
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', <r1=>0x0})
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x3, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x735, 0x4)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$packet(r0, &(0x7f00000002c0)="fb57975e267951722b395d37bac8", 0xe, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1800000056000106000000000000000007"], 0x18}], 0x1}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3)
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0xc8, r4, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xc8}}, 0x40000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050009"], 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6020400)
r7 = socket(0xa, 0x2, 0x3a)
bind$inet(r7, 0x0, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
r9 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x8004}, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000003b34eea3391ad7b1fb32a34440769a39c9d6d47f85d9d9e54006b0115215b1992874e686bb1bd9ee928d43fb02d89d51fac1e9505d64f23af8021d0e274ff98a64322ff6c4c0a8e99d19a5f426a3145c9f43d2415fcfa6ae8c46c6937bf3f313be10f2c3ab0e3230c5c4e044690ca478434bfc832a5677dd258e0e5ed7620ef58583728205238192f96092af1c5096b41a8773ceffbf366477a479bc25532fbf4bf9976285fc02cc88c01d267ab11cea99c1bf5bb8e8f6693466e24cc2c57193e154803021bc869107f5a630", @ANYRES16=r10, @ANYBLOB="130d00000000000000000a02000004000180"], 0x18}}, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r1}, 0x8)
executing program 2:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0)
r2 = getpid()
write$cgroup_pid(r1, &(0x7f0000000880)=r2, 0x12)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}]}, 0x24}}, 0x0)
executing program 2:
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@remote, @in=@local}}, {{@in6=@remote}}}, &(0x7f0000000340)=0xe4)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2700010007"], 0xd)
executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711017000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
executing program 2:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)={'b', ' *:* ', 'm\x00'}, 0x8)
executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5ffad8800000000140012800b0001006970766c616e000004000280080005"], 0x44}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x11, 0x80a, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000003400128009000100626f6e640000000024"], 0x54}}, 0x0)
executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002100000000000000006700000000000000160000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00', r0}, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="cb2440ac9e0c"}]}, 0x44}}, 0x0)
executing program 2:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r0, 0x8004b706, 0x0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 5 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT
detailed listing:
executing program 0:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r0, 0x8004b706, 0x0)

program crashed: WARNING: lock held when returning to user space in ns_ioctl
single: successfully extracted reproducer
found reproducer with 2 syscalls
minimizing guilty program
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace
detailed listing:
executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$NS_GET_PARENT
detailed listing:
executing program 0:
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0x8004b706, 0x0)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT
detailed listing:
executing program 0:
r0 = syz_open_procfs$namespace(0x0, 0x0)
ioctl$NS_GET_PARENT(r0, 0x8004b706, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT
program crashed: WARNING: lock held when returning to user space in ns_ioctl
simplifying C reproducer
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT
program crashed: WARNING: lock held when returning to user space in ns_ioctl
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT
program crashed: WARNING: lock held when returning to user space in ns_ioctl
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT
program crashed: WARNING: lock held when returning to user space in ns_ioctl
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT
program crashed: WARNING: lock held when returning to user space in ns_ioctl
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT
program crashed: WARNING: lock held when returning to user space in ns_ioctl
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT
program crashed: WARNING: lock held when returning to user space in ns_ioctl
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT
program crashed: WARNING: lock held when returning to user space in ns_ioctl
reproducing took 28m27.965553571s
repro crashed as (corrupted=false):
================================================
WARNING: lock held when returning to user space!
6.10.0-syzkaller-04472-g51835949dda3 #0 Not tainted
------------------------------------------------
syz-executor248/5088 is leaving the kernel with locks still held!
1 lock held by syz-executor248/5088:
 #0: ffffffff8e335fe0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:327 [inline]
 #0: ffffffff8e335fe0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:839 [inline]
 #0: ffffffff8e335fe0 (rcu_read_lock){....}-{1:2}, at: ns_ioctl+0x3e0/0x740 fs/nsfs.c:184
BUG: sleeping function called from invalid context at include/linux/sched/mm.h:337
in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 5088, name: syz-executor248
preempt_count: 0, expected: 0
RCU nest depth: 1, expected: 0
INFO: lockdep is turned off.
CPU: 0 PID: 5088 Comm: syz-executor248 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114
 __might_resched+0x5d4/0x780 kernel/sched/core.c:8437
 might_alloc include/linux/sched/mm.h:337 [inline]
 prepare_alloc_pages+0x1c9/0x5d0 mm/page_alloc.c:4454
 __alloc_pages_noprof+0x166/0x6c0 mm/page_alloc.c:4672
 alloc_pages_mpol_noprof+0x3e8/0x680 mm/mempolicy.c:2265
 vma_alloc_folio_noprof+0xf3/0x1f0 mm/mempolicy.c:2304
 folio_prealloc+0x31/0x170
 wp_page_copy mm/memory.c:3285 [inline]
 do_wp_page+0x11cc/0x52f0 mm/memory.c:3677
 handle_pte_fault+0x117e/0x7090 mm/memory.c:5397
 __handle_mm_fault mm/memory.c:5524 [inline]
 handle_mm_fault+0x10df/0x1ba0 mm/memory.c:5689
 do_user_addr_fault arch/x86/mm/fault.c:1338 [inline]
 handle_page_fault arch/x86/mm/fault.c:1481 [inline]
 exc_page_fault+0x459/0x8c0 arch/x86/mm/fault.c:1539
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
RIP: 0033:0x7f1ecb839de0
Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 0d 02 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 <f0> 0f b1 15 e0 2e 0a 00 0f 85 0f 02 00 00 4c 8d 25 d3 2e 0a 00 4c
RSP: 002b:00007ffe32446890 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001
RDX: 0000000000000001 RSI: 00007f1ecb8da110 RDI: 0000000000000000
RBP: 00007f1ecb8da110 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001
 </TASK>

final repro crashed as (corrupted=false):
================================================
WARNING: lock held when returning to user space!
6.10.0-syzkaller-04472-g51835949dda3 #0 Not tainted
------------------------------------------------
syz-executor248/5088 is leaving the kernel with locks still held!
1 lock held by syz-executor248/5088:
 #0: ffffffff8e335fe0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:327 [inline]
 #0: ffffffff8e335fe0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:839 [inline]
 #0: ffffffff8e335fe0 (rcu_read_lock){....}-{1:2}, at: ns_ioctl+0x3e0/0x740 fs/nsfs.c:184
BUG: sleeping function called from invalid context at include/linux/sched/mm.h:337
in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 5088, name: syz-executor248
preempt_count: 0, expected: 0
RCU nest depth: 1, expected: 0
INFO: lockdep is turned off.
CPU: 0 PID: 5088 Comm: syz-executor248 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114
 __might_resched+0x5d4/0x780 kernel/sched/core.c:8437
 might_alloc include/linux/sched/mm.h:337 [inline]
 prepare_alloc_pages+0x1c9/0x5d0 mm/page_alloc.c:4454
 __alloc_pages_noprof+0x166/0x6c0 mm/page_alloc.c:4672
 alloc_pages_mpol_noprof+0x3e8/0x680 mm/mempolicy.c:2265
 vma_alloc_folio_noprof+0xf3/0x1f0 mm/mempolicy.c:2304
 folio_prealloc+0x31/0x170
 wp_page_copy mm/memory.c:3285 [inline]
 do_wp_page+0x11cc/0x52f0 mm/memory.c:3677
 handle_pte_fault+0x117e/0x7090 mm/memory.c:5397
 __handle_mm_fault mm/memory.c:5524 [inline]
 handle_mm_fault+0x10df/0x1ba0 mm/memory.c:5689
 do_user_addr_fault arch/x86/mm/fault.c:1338 [inline]
 handle_page_fault arch/x86/mm/fault.c:1481 [inline]
 exc_page_fault+0x459/0x8c0 arch/x86/mm/fault.c:1539
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
RIP: 0033:0x7f1ecb839de0
Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 0d 02 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 <f0> 0f b1 15 e0 2e 0a 00 0f 85 0f 02 00 00 4c 8d 25 d3 2e 0a 00 4c
RSP: 002b:00007ffe32446890 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001
RDX: 0000000000000001 RSI: 00007f1ecb8da110 RDI: 0000000000000000
RBP: 00007f1ecb8da110 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001
 </TASK>