Extracting prog: 1h22m55.020905749s Minimizing prog: 28m37.408999057s Simplifying prog options: 0s Extracting C: 28.730018947s Simplifying C: 6m38.436128647s extracting reproducer from 49 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-socket$inet6_sctp-bind$inet6-ioctl$TUNSETIFF-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$nl_route-ioctl$sock_SIOCGIFINDEX-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$kcm-socket$unix-socket$inet_tcp-getsockopt$ARPT_SO_GET_ENTRIES-socket$nl_route-sendmsg$nl_route-setsockopt$sock_attach_bpf-mkdirat-mount-socket$nl_netfilter-openat-write-socketpair-bpf$BPF_GET_PROG_INFO-sendmsg$kcm-socket$nl_route detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 49 programs with base timeout 30s testing program (duration=42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 19, 24, 24, 15, 19, 30, 13, 30, 4, 10, 8, 23, 23, 30, 3, 30, 30, 2, 30, 30, 20, 8, 12, 6, 27, 17, 20, 30, 2, 30, 4, 30, 30, 30, 23, 5, 22, 29, 8, 1, 2, 12, 16, 30, 3, 23, 30, 30] detailed listing: executing program 3: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file1\x00', 0x42003, 0x4) r1 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_SEND_ZC={0x2f, 0xa, 0xc, 0xffffffffffffffff, &(0x7f00000005c0)="6938867047104b40daf8afa94d92d0b985b1b75ed90b070cd614a26cb45be7e187338557a3fb2f9d709109800927a84e2c7e3fa52027b594cc9e729621840de3fc9376496258899a0428c4727fea166bb0e2ea5456a884378af110cae10a43b4033f64ba9e50d1d4b0c9b5013e1ef53e1fe7a4c3b58ce694c0a9f4892bc086456be13b", 0x0, 0x7b, 0x11, 0x0, {0x0, 0x0, 0x83}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000440)={0x2e, 0x48, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@any_dev={0x4, 0x127, 0x0, 0x0, 0x1000, 0x1d6, 0xffffffffffffffff, 0x0, 0xab}}}, 0x0) io_setup(0x20ff, &(0x7f0000000100)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim0/sriov_numvfs\x00', 0x1, 0x0) write(r6, &(0x7f0000000280)="31e4", 0x2) io_submit(r5, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)='p', 0x8200, 0x600}]) executing program 3: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40, 0x3}}, './file0\x00'}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f0000000140)={&(0x7f00000000c0)=[r1], 0x5, 0x1, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000080)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f0000000140)={&(0x7f00000000c0)=[r3], 0x5, 0x1, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000100)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f0000000140)={&(0x7f00000000c0)=[r6], 0x5, 0x1, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f0000000140)={&(0x7f00000000c0)=[r9], 0x5, 0x1, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f0000000140)={&(0x7f00000000c0)=[r10], 0x5, 0x1, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000280)={&(0x7f00000001c0)=[r1, r2, r3, r4, r5, r6, r7, r8, r9, r10], &(0x7f0000000200)=[0x9, 0x3, 0x1ff], 0xa}) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002000)={0x2c, 0x1e, 0x221, 0x0, 0x0, {0x7}, [@nested={0x18, 0x19, 0x0, 0x1, [@nested={0x14, 0xf3, 0x0, 0x1, [@nested={0x10, 0x28, 0x0, 0x1, [@nested={0xc, 0x41, 0x0, 0x1, [@typed={0x8, 0x10b, 0x0, 0x0, @fd}]}]}]}]}]}, 0x2c}}, 0x0) executing program 3: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, r1, 0x1, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000000), 0x1, 0x792, &(0x7f0000020c00)="$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") readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000012c0)=""/168, 0xa8) (async) readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000012c0)=""/168, 0xa8) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000240)=""/241, 0xf1}], 0x2}, 0x2df7}], 0x1, 0x12001, 0x0) (async) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000240)=""/241, 0xf1}], 0x2}, 0x2df7}], 0x1, 0x12001, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = fsmount(r3, 0x0, 0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r5, 0x16, 0x0, @void}, 0x10) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r5, 0x16, 0x0, @void}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) executing program 32: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, r1, 0x1, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000000), 0x1, 0x792, &(0x7f0000020c00)="$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") readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000012c0)=""/168, 0xa8) (async) readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000012c0)=""/168, 0xa8) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000240)=""/241, 0xf1}], 0x2}, 0x2df7}], 0x1, 0x12001, 0x0) (async) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000240)=""/241, 0xf1}], 0x2}, 0x2df7}], 0x1, 0x12001, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = fsmount(r3, 0x0, 0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r5, 0x16, 0x0, @void}, 0x10) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r5, 0x16, 0x0, @void}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x903f01) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0xffffffff) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f021}) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_driver={0x126, 0x1, 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r4, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r6, r5, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r7 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x4, &(0x7f0000000400), &(0x7f0000000000)=0xffffffffffffffe8) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="306e8ea7c3b763e000000000000600", 0x10) executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r5], 0x48}}, 0x0) executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000140), 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001000000400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001000128008000100687372000400028008003a00", @ANYRES32=0x0, @ANYBLOB="e1f3a165dd216af5f2f452a8849090c6ab9d1353554bab4b4c34aeee8739822c011554a050b909abac9634e8a1c3af44c91ca5e28944a6357d9436b8ccb1076e7ce8fd585be4e2c18482da0521f783fd979443520401abf39905ce2bf5af743d58c6386faa9d929f2b0f1eb4bd7bfbe901b741a0c1a5e0c8b9c95000d30af235a7575ca4"], 0x38}}, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0x29, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x48d0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10) listen(r2, 0x9) r4 = socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x24008001}, 0x8) sendto$inet(r4, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r1, &(0x7f0000000b40)=[{0x0}, {&(0x7f00000033c0)=""/4089, 0xff9}, {&(0x7f00000013c0)=""/4089, 0xff9}], 0x3) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x33fe, 0x0, 0xfffc}}}) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYRES64=r4, @ANYRES64], 0x9) r6 = socket$netlink(0x10, 0x3, 0x15) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="10000000191409"], 0x10}}, 0x0) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000)=0x3, 0x4) write$char_usb(r7, &(0x7f0000000040)="e2", 0xff0f) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'caif0\x00'}) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom(r1, &(0x7f0000000100)=""/213, 0xd5, 0x2043, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x4, 0x4, 0x2, {0xa, 0x4e20, 0x6, @loopback, 0x1bc7}}}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2}]}}]}, 0x48}}, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) executing program 0: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 32) syz_emit_ethernet(0x0, 0x0, 0x0) (rerun: 32) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x43}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c860000", @ANYRES16=r0, @ANYBLOB="062551a9fe000300ffff020000000804030077fc802a4b79858763396fac47636a6f20c09dd7d42242b8fec8b06006de2b725a95ef413665b9d200438de6fc3448346cf9b5b4a109926684aa6bcc25104854255ae69ee76d272af4", @ANYRES32=r2, @ANYBLOB="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", @ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x45) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) (async) futex(&(0x7f0000000180)=0x4, 0x5, 0x4, 0x0, 0x0, 0x40002) futex(&(0x7f000000cffc)=0x8000023, 0xc, 0x1, 0x0, &(0x7f00000006c0)=0x1, 0x0) (async) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="000228bd7000fddbdf256900000008000300", @ANYRES32=r2, @ANYBLOB="758a2c85b444c99039474b86e87ecb2fb67da3a2ffcf4cd75a1d8d21fadbf8f86fd5a29ea8d1fdc83b9425a065dfcbd426e9918984a34fa44919b0febb452c24b1d8279504445479af629f2e7be3aef16e8d8eba451141d63e99371a833e1d84036d026cd4e5c6d4393abaecad8c5b990408b6ea9bd93fd886f7d2183210aa"], 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x20000080) (async) unshare(0x6020480) r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r7, 0x0, 0x18) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000b8", @ANYRES16=r0, @ANYBLOB="080026bd7000fcdbdf255c00000008006b003700000008006b004500000008006b001400000008006b00dd038c2908006b003c000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) syz_io_uring_setup(0x39b5, &(0x7f0000000740)={0x0, 0x6e5f, 0x4, 0xffffffff, 0x320}, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r8, 0x4b52, &(0x7f0000000000)) executing program 2: r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x8809, &(0x7f0000000000), 0x1, 0x536, &(0x7f0000000a40)="$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") r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) chdir(&(0x7f0000000240)='./file0\x00') executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x20000086, &(0x7f00000002c0)={[{@nouid32}, {@jqfmt_vfsv1}, {@sysvgroups}, {@errors_remount}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x1, 0x4c0, &(0x7f00000005c0)="$eJzs3E1oHFUcAPD/TD763aS1frQWG61isJo0adUePKgo9CIIeqjgJaax1KatNBFsKTaK1KN48qgeBcGTF08KIupJ8ap3EYr00upBVmZ3JtlNdrebTbZru78f7O5787Hv/WfmZd7My2wAPWske0sitkbEbxExVMnWLjBS+bh+9eL031cvTidRKr30V1Je7trVi9PFosV6W/LMaBqRvp/EvXXKnTt/4dTU7OzMuTw/Pn/6zfG58xceO3l66sTMiZkzk0eOHD408eQTk4+vS5xZXNf2vHN27+6jr3z0wnQpXvvxi6y+W/P51XFUDK+5zJEYiVJuaepg+f2hNX/7/8u2qnTS38WKsCp9EZHtroFy+x+KvljaeUPx/HuLme+6VEGgY7Jz0448vdTy+/LPdPH8BdyOEm0celRxxs+uf4vXze6DdNOVZ7L3mXL81/NXZU5/pNm17HDlir2vwfp3tVhOaVl+MP/cGhHHFv75JHtF3fsQAADr65us//Novf5fWtO32Z6PoQxHxIGI2BkRd0TEroi4M+8H3R0R96yy/JFl+ZX9n182tRVYi7L+31P52FZt/y/Nl0gWc9vK8Q8kr5+cnTmYb5PRGNiQ5SealPHtc79+2GjeSFX/L3tl5Rd9wbwef/ZvqF3n+NT81BpCrnHl3Yg9/fXiTxbvB2ZbYHdE7Gnj+7NtdvKRz/dm6e1bVs6/QfzN9/06jDOVPot4uLL/F2JZ/IWkUlKj8cnxjTE7c3C8OCpW+unnyy9W5weq0jXxb2wtpo3tBltHtv831z3+8/iLZlCM186tvozLv3/Q8Jpm5f5P4thC9RL58V91JGTH/2DycjldXEe9PTU/f24iYjCfUDN9cmndIl8sn8U/ur9++98Z8e+n+XqLY9gLEfdFxL687vdHxAMRsb9J/D88++AbzbdQs/bfWVn8xxvt/8q+H06qx+vbSPSd+v7rRuW39vfvcDk1mk9p5e9fXnhxOmpYwTVsOgAAALhlpOUx6CQdK9JVN6d2xeZ09uzc/IGReOvM8cpY9XAMpMWdrqGq+6ET+b3hIj+5LH8oInaU/9NoUzk/Nn12dls3AwfKz+rUtP9I07Gxyrw/Gv3TC3D7WNU4WvXTgV9+tf6VAW4qz2tC79L+oXdp/9C7tH/oXfXa/6WI612oCnCTOf9Dz0q6XQGge5z/oXdp/9CTVj4SX/zQQjtP+i8ldh5d0+odT5SGOvLNC6tfq69DkUb1j3Y0TCTNfhyhaSLS5ssMtlB6g8SrH1cOwc4dAOkNl3m6g6XniX15YkNEtLrWpfa3ahvHDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK3vvwAAAP//zoLYSA==") r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x141d, &(0x7f0000000380)={0x0, 0xb499, 0x400, 0x2, 0x212}, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) accept(r0, 0x0, &(0x7f0000000180)) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000200)={'pim6reg1\x00', @remote}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) executing program 2: r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x2, 0x0, 0x3}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405668, &(0x7f00000000c0)={0x6, 0x1, 0x1, "0000087aba10fdfffffb05001400", 0x31384142}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r3, 0x0, 0x0, 0x0, 0x4, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x1, 0xfffffffe, 0x1}}) executing program 0: bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$inet6(r4, &(0x7f0000005000)=[{{0x0, 0x0, &(0x7f0000003d40)}}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_getanyicast={0x14, 0x3e, 0x400, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x8, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0xfffffffe}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}}, 0x811) executing program 33: bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$inet6(r4, &(0x7f0000005000)=[{{0x0, 0x0, &(0x7f0000003d40)}}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_getanyicast={0x14, 0x3e, 0x400, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x8, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0xfffffffe}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}}, 0x811) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0xf, 0x0, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r2, 0xc138fd00, &(0x7f0000000180)="04") mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000700)={r1, 0xfffffffffffffffb, 0x36c83b1d, 0xab}) pread64$ublk_bdev(r3, &(0x7f0000000c00)=""/4096, 0x1000, 0xae2) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x5, 0xffffffff9080edc4, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x4}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x8000000000, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x6, 0x1, 0x2, 0x100, 0x4, 0x5, {0x6, 0x9, 0x6, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, r6, r7, 0x1, 0x4}}, {0x20000000000000, 0x533, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) r8 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000440)=0x1c, 0x800) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r9, &(0x7f0000000600)=[{0x0}, {&(0x7f00000001c0)="01200000", 0x4}], 0x2, 0x3, 0x7fffffff) socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f00000006c0)=0xfffffffffffffd23) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280), 0x3040001, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=unix,versiovmap,mmap,dfltuid=', @ANYRESHEX=r6, @ANYBLOB=',euid=', @ANYRESDEC=r10, @ANYBLOB=',\x00']) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES8=r1], 0x68}}, 0x40008080) executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) (async) acct(&(0x7f0000000740)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00') (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (rerun: 64) mq_timedreceive(r2, 0x0, 0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) (async) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x5, &(0x7f0000000780)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r2], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000180)=0x3, 0x4) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xe4dcbaa0db43574f}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x3e, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x4c}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2c3f, 0x3, 0x20000000, 0x2, 0x7}, 0x1e}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r0) (async) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async, rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) (async) r11 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5pC\n\x00p\xf0\b\x84\xa2m\x00\v\x18\x004y\xa3y\xdb\xd1\xa7\xf1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=P\x03\xcdJ\x04K\x98\xaeph\xc9?\xa0[\xb1\xc8`\xcc\xd8\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\x06\xb2\xcc~\x95\xdf\xe7\xe5\xaeLl\x86(\xec\xac\xe33\x8a\x11\xd3\xfb\x9b\x1b,C\x05\xa4\x88I\xe1,W\xd7\xfcA\xa0\x06\xc3\xbc0\xf4\xfd\xcc\x8d\x01k|B2{ZVU&\xe8\xfd\xd0\v\xdb\xc8\x98\xd2\xd1\xcf8%d-\n\x971\xa8\xe2\xc1\x9fH\x9e\x8a\xfbSe\x1b\x97\xed\x18\x8f\x1a\xc1s,\xe7\x89\xbb\x1dU\f\xc1\x9682\xa4\x12u\xaa\xb6\xdel\x14\xdap\bA\xa7w\xd9\xff\v\xd0)\xc3\xfb|\xba&\xf5\xe4k\xec7u\xb3\xd1\fv^\x0ei\xd5\xd8\xda0$l\x9b\xc1\x89eu\xba\xfa\xd3/>@\xdb\xaa \a\xe1\x1a\xdc|\xb3\xe8\xa4\x06\x91s\x17{:\xfb\bw\xb0V\x97\xe0j\xee~\xa6eV\x0f\x94|\xdc\x13jQ\xc0`\x90\x80cfW^p]~kL\xcbh\xb4o8\xbe\xc2\x17\xb1\x9d\x1f\b<\x18\xee\xea\xbe\xcbG\xf7H\'f@F\aO\x830&\xab^\xa3\xe0\x1c\xa0\xe2\xf4?\x02!zJ\n\x11\x86\x86\xc9\x16\x10\x16\'Q\x7f\xd3\xd4\xe6\xfe\x89S\x8cw\xca\xce\x00\x00\x00\x00\x00\x00\x00\x00\x00]7\xb7\xc4\x866x2MQ2\xb5\xda\x19\xf8\xc0\xeaT\xc0-\xd3h\xcd', 0x0) fallocate(r11, 0x0, 0x100, 0x9) pread64(r11, &(0x7f00000000c0)=""/91, 0x5b, 0xf) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) sendto$packet(r8, &(0x7f00000002c0)="05031c00d3fc14a888004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) executing program 34: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) (async) acct(&(0x7f0000000740)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00') (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (rerun: 64) mq_timedreceive(r2, 0x0, 0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) (async) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x5, &(0x7f0000000780)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r2], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000180)=0x3, 0x4) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xe4dcbaa0db43574f}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x3e, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x4c}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2c3f, 0x3, 0x20000000, 0x2, 0x7}, 0x1e}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r0) (async) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async, rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) (async) r11 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5pC\n\x00p\xf0\b\x84\xa2m\x00\v\x18\x004y\xa3y\xdb\xd1\xa7\xf1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=P\x03\xcdJ\x04K\x98\xaeph\xc9?\xa0[\xb1\xc8`\xcc\xd8\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\x06\xb2\xcc~\x95\xdf\xe7\xe5\xaeLl\x86(\xec\xac\xe33\x8a\x11\xd3\xfb\x9b\x1b,C\x05\xa4\x88I\xe1,W\xd7\xfcA\xa0\x06\xc3\xbc0\xf4\xfd\xcc\x8d\x01k|B2{ZVU&\xe8\xfd\xd0\v\xdb\xc8\x98\xd2\xd1\xcf8%d-\n\x971\xa8\xe2\xc1\x9fH\x9e\x8a\xfbSe\x1b\x97\xed\x18\x8f\x1a\xc1s,\xe7\x89\xbb\x1dU\f\xc1\x9682\xa4\x12u\xaa\xb6\xdel\x14\xdap\bA\xa7w\xd9\xff\v\xd0)\xc3\xfb|\xba&\xf5\xe4k\xec7u\xb3\xd1\fv^\x0ei\xd5\xd8\xda0$l\x9b\xc1\x89eu\xba\xfa\xd3/>@\xdb\xaa \a\xe1\x1a\xdc|\xb3\xe8\xa4\x06\x91s\x17{:\xfb\bw\xb0V\x97\xe0j\xee~\xa6eV\x0f\x94|\xdc\x13jQ\xc0`\x90\x80cfW^p]~kL\xcbh\xb4o8\xbe\xc2\x17\xb1\x9d\x1f\b<\x18\xee\xea\xbe\xcbG\xf7H\'f@F\aO\x830&\xab^\xa3\xe0\x1c\xa0\xe2\xf4?\x02!zJ\n\x11\x86\x86\xc9\x16\x10\x16\'Q\x7f\xd3\xd4\xe6\xfe\x89S\x8cw\xca\xce\x00\x00\x00\x00\x00\x00\x00\x00\x00]7\xb7\xc4\x866x2MQ2\xb5\xda\x19\xf8\xc0\xeaT\xc0-\xd3h\xcd', 0x0) fallocate(r11, 0x0, 0x100, 0x9) pread64(r11, &(0x7f00000000c0)=""/91, 0x5b, 0xf) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) sendto$packet(r8, &(0x7f00000002c0)="05031c00d3fc14a888004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0x2, 0x4e24, 0xfffffff9, @local}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r2, 0x110, 0x7, 0x0, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r5, 0x0, 0x0) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x1, {0x176e19c8f85d2a1e, 0xf0, 0x6}, 0x2}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000180)={0x1d, r9, 0x1, {0x1, 0xf0, 0x1}, 0xff}, 0x18) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r9, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r11) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r13) socket$nl_route(0x10, 0x3, 0x0) executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xf7}, "573211faaa0aa68195dd33a0c39dbaf32addb290a5aa3b0067946ce95a5758eac25ae2a4d30abb3c28a88cf34129d20324f8ffb75799cfe2f0a8497640045d0d1190f222f0258be50d57b7634d3c43f859670775eb491ac80f8b9feebdee7b7be070a753126f8724405bbb3292cebc44e97cd771f2c0d148bef03bdec3f24827b12e6a962e38c0dfaa211a8998a906cef52c88a4e59cda914d4be5cfcff1063a39ce4f9155ec2b11d3847852f5c0b976a64161149a8d968b8c867338f5fc89f3fa15e1e0109e76e5190413a8a4da6bdc0248594cd6ff912595a119d2a31766e2ecc763205d871f3965929d5ef382d0eb10f8d77390f321"}, 0xfb) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x420400, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x94082, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x6, 0xa4e03) ioctl$HIDIOCGFLAG(r3, 0x8004480e, &(0x7f0000000200)) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000280)={0x0, r2, 0xfffffffffffffffd, 0x7fffffffffffffff, 0xffffffffffffffff, 0x401}) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f00000002c0)=""/227) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x40, 0x8000, 0xd, 0xbf3, {{0x14, 0x4, 0x2, 0x39, 0x50, 0x65, 0x0, 0x46, 0x29, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x44}, {[@generic={0x44, 0x9, "5e1eaf266a1604"}, @timestamp={0x44, 0xc, 0xdf, 0x0, 0x8, [0x3, 0x7]}, @timestamp_addr={0x44, 0xc, 0xf1, 0x1, 0x5, [{@broadcast, 0x2e61}]}, @lsrr={0x83, 0x17, 0x89, [@private=0xa010101, @private=0xa010102, @multicast2, @remote, @multicast1]}, @end]}}}}}) sendmsg$nl_route(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=@newneigh={0x98, 0x1c, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, r4, 0x4, 0x18, 0xa}, [@NDA_SRC_VNI={0x8, 0xb, 0x7}, @NDA_CACHEINFO={0x14, 0x3, {0xffffffff, 0x5, 0xf, 0x7fffffff}}, @NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NDA_NH_ID={0x8, 0xd, 0x2}, @NDA_VNI={0x8}, @NDA_LLADDR={0xa, 0x2, @local}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xf9}]}, @NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @NDA_PROTOCOL={0x5, 0xc, 0x7}, @NDA_NH_ID={0x8, 0xd, 0x9}]}, 0x98}}, 0x40) r5 = socket$netlink(0x10, 0x3, 0x4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000600)={0x0, 0x400}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000680)={r6, 0x4, 0x4, 0x5, 0x6, 0x8}, &(0x7f00000006c0)=0x14) ioctl$XFS_IOC_FSGROWFSLOG(r3, 0x4008586f, &(0x7f0000000700)={0x0, 0x5}) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x3c) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) fdatasync(r7) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000740)={r6, 0xfff9, 0x4, [0x6, 0x1, 0x9, 0x80]}, &(0x7f0000000780)=0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x140a, 0xe21, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x200440d1}, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, 0x1402, 0x8, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x8) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000a40)={0x5, &(0x7f0000000a00)=[{}, {}, {}, {}, {}]}) syz_genetlink_get_family_id$smc(&(0x7f0000000a80), r5) r9 = syz_open_dev$usbfs(&(0x7f0000000d00), 0x6, 0x20081) sendmmsg$unix(r1, &(0x7f0000000dc0)=[{{&(0x7f0000000ac0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000b40)="d98878fe9acb269c0c89bd81557d82c9ebef3183ffa170cd0ea8e20377364ac04897488e0f3792f738eab5217650f01641bdc5d9e1c6328859123126391d63454f9a72e914a1faab404dbc3e435a8dd095601b3937f3beeb880e55495b464910c9632cb12f43f7d9f5d40b0b86cd41e770553be542ba0a01e8740ab1adabe9b6c9862d1b6a195d150fc684632b81f4b045702d21b60d31c7d763fbcc2d699eefd625e9abd3b3b9d7c198e7e65b5271f84af15a122781fd55cecdc97f96d205a055f183082bb9549d9a1efa45ea7db72e53a50a8c1e41c6994e", 0xd9}, {&(0x7f0000000c40)="9b599a0dd982736f2cedd95a4efcb62ea1fa69da1a6a8c989781321018cde0296540a686c104a529f74e74e2d3c37999681e01610571ecbb1a9d10a14395c22ba907f431be055da87a2d25cd4536ba73b67a789a3cbe98728ab3c598e6950b94cc27c242d5f5ddfce8b20c83", 0x6c}], 0x2, &(0x7f0000000d40)=[@rights={{0x14, 0x1, 0x1, [r8]}}, @rights={{0x18, 0x1, 0x1, [r9, r8]}}, @rights={{0x1c, 0x1, 0x1, [r3, r8, r8]}}], 0x50, 0x4010000}}], 0x1, 0x8800) write$make_it_fail(r1, &(0x7f0000000e00)='0\x00', 0x2) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000e40)={0xaa, 0x4}) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='100\x00', 0x3) mmap(&(0x7f0000000000/0x1000000)=nil, 0x10000000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x1000000)=nil, 0x10000000, 0xe) madvise(&(0x7f0000000000/0x1000000)=nil, 0x10000000, 0x17) madvise(&(0x7f0000000000/0x1000000)=nil, 0x10000000, 0x15) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@grpid}, {@jqfmt_vfsv0}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") mkdirat(r0, &(0x7f0000000180)='./proc/sys/vm/compaction_proactiveness\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x1, 0x0) (async) write(r0, &(0x7f0000000100)='100\x00', 0x3) (async) mmap(&(0x7f0000000000/0x1000000)=nil, 0x10000000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x1000000)=nil, 0x10000000, 0xe) (async) madvise(&(0x7f0000000000/0x1000000)=nil, 0x10000000, 0x17) (async) madvise(&(0x7f0000000000/0x1000000)=nil, 0x10000000, 0x15) (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@grpid}, {@jqfmt_vfsv0}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") (async) mkdirat(r0, &(0x7f0000000180)='./proc/sys/vm/compaction_proactiveness\x00', 0x1ff) (async) executing program 1: syz_emit_ethernet(0x200000, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x40106183, &(0x7f00000000c0)={@none, 0x1}) unshare(0x400) landlock_restrict_self(r0, 0x2) executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0) executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="95ff8a492bf79006e8b47d1df2d48444a8b9c53057f1341766db2f1d87d894c942b366bf37c4ee87ecdf3fe0eceaf774d8efc4dfb05256e3661d83db19439424cc74", @ANYRES16=r1, @ANYBLOB="cd3e000000000000f9a11598ac47e9dad4d300000100000006000b002500f8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f9204020b006f64e62cd3404917f3be657330adc6bf2f2ab6286f917412935536f4406edcdc8a3779814659bebb63d2c301a5e28a8cb3696d7ed256da47bd6246c86e86ac9cfbdae22622b43a13e9096385b4cb17b86d8436e77f709e436462ad3ba28f73bf36e8e358673326e220d60a9d3d7e3c932faf89062b965db52beeff385e442adbb8d87480d48f4b3d4530e85283000008000800ffffffff6c1bbe8ff5986ff1866ad51e282a2bb19bf608915f0340b861dc4daadca2d381ec86a4f1de0aa69fb9080e10d4ed47d0ca9360bffd63a2337a41d9d02a6fe5a430e3450467df8c750058c5b51003369c2e6f8cef278bbce3b11947d7545ad9354efba9df708a3d3772bf667ef79cf832652a48a22e867e28218f87da0d45d0c0270e2e854c2e29d20a239f409c5756b87df55ddef9eb84706bf1a994a7ee6499667778448ccbdb534feb6f12f572a00ef1cb483815a8f3d40955"], 0xf4}, 0x1, 0x0, 0x0, 0x8c0}, 0x20040084) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc08958fb61362d40, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100000fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000003100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x84, r2, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x8020) executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents64(r2, &(0x7f0000000000)=""/90, 0x5a) getdents64(r2, 0x0, 0x0) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000030c0)) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000003100)={0xffffffffffffffff}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2, 0x2) setrlimit(0x40000000000008, &(0x7f0000000000)) setresuid(0x0, 0xee01, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0xa0, 0x33, 0x107, 0xfffffffe, 0x4, {0x2, 0x7c}, [@nested={0x8c, 0x1, 0x0, 0x1, [@typed={0x88, 0x7, 0x0, 0x0, @str='\x80\nK\x81y\xa1\x8d\xa8\x94\xfcA\xcdv]\x12\xa6VOd\x14LzO\x14DB\x8b\x06p\x0e\xc4\x91\xef*\x82\xf4\xa5\xae\a\x06\xcf\x1c\x1ey1x\xb2O\xd1\x93[\xb51\xb7D/\xecC\xc9\xbc\x84@\x8e\x95\x80i\x90h\xfcv\x9b~\x88\xf9\x04.\xfd\x889\x01y\x99\r\x1b\xbb\xd8\x967A\xc8\x94(k\xd1\xcdf\x85H|\x95\xbe\xa0\xf7\x84\xc6\xca\x85m\xa6\xe0\x7f\xbfb\v\xdd\xfc\x94\x82\x8c\xb1\x1d\t4S\xe2\xbe\xb2\xcd.\xc9\x1b\xbd'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x815}, 0xc000) ioctl$XFS_IOC_READLINK_BY_HANDLE(r4, 0xc038586c, &(0x7f0000000440)={r6, &(0x7f0000000280)='9p\x00', 0x200400, &(0x7f00000002c0)={@_ha_fsid={[0xfffffeff, 0x8]}, {0xecc, 0x8, 0x6, 0x800}}, 0x6, &(0x7f0000000340), &(0x7f00000003c0)=0x2}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write(r5, &(0x7f0000000400)='!*:n_existent_event:mod:', 0x18) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003180)=@RTM_GETNSID={0x54, 0x5a, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NETNSA_PID={0xffffffffffffffeb, 0x2, r1}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_FD={0x8, 0x3, r2}, @NETNSA_FD={0x8, 0x3, r3}, @NETNSA_PID={0x8, 0x2, r1}, @NETNSA_FD={0x8, 0x3, r5}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r7) r8 = socket(0x11, 0x2, 0x20000000) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f00000004c0)=0x517, 0x4) r9 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0xff}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}}) executing program 7: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x121000, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f00002e1000/0x3000)=nil) mremap(&(0x7f0000e1b000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000f2b000/0x4000)=nil) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x4}) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000040)={{0x7, 0x0, 0xffffffff, 0x2, 0x1}, [{0x2, 0x6, 0x3, 0xe}, {0xa86, 0x80, 0x8, 0x2}, {0x9, 0x0, 0x28, 0x3}, {0xa60, 0x7, 0x0, 0x6}]}) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) r3 = io_uring_setup(0x5b3c, &(0x7f0000000280)={0x0, 0x5199, 0x2, 0x2, 0x1e8}) mmap$IORING_OFF_SQ_RING(0x0, 0x80000001, 0x0, 0x11, r3, 0x0) executing program 7: syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="2cff16dfca9241ad7e072e98ba64eabf7227969cc6f846c59e0928963a88c1825403a9cd9733739e5c18843e5bfbec4fcccebf7d96d6a14916e01dd491d1b40a45883855aadaadb4b494b9d6fdeed874eae609bd8ac34114acf393f0fbe7e9f3ae0cac5b52f60c06c7a5d1e7cfd4e12a5fc0d79b3568582b7fdb738d93ca77bc8ae4"], 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v'], 0x50) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) sendmsg$inet(r2, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000140)="81", 0x1}, {&(0x7f0000001900)="879dda0ac3ec0d88", 0x8}], 0x2}, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r2}, 0x20) recvfrom$inet(r2, &(0x7f0000000200)=""/47, 0x2f, 0x10001, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRESOCT, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRESOCT, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x800) executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x16, 0xf0060) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000040)=""/4096) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001140)={0x1, 0x5, &(0x7f0000001040)=[0xbe99, 0x2, 0x3, 0xaa, 0x6], &(0x7f0000001080)=[0x10, 0xfeaf], &(0x7f00000010c0)=[0x6, 0x5c, 0x0, 0x40, 0x9, 0x8, 0x3], &(0x7f0000001100)=[0x8, 0x0, 0x6, 0xf]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001240)={'ip_vti0\x00', &(0x7f0000001180)={'syztnl1\x00', 0x0, 0x10, 0x20, 0x8, 0x4, {{0x27, 0x4, 0x1, 0x9, 0x9c, 0x65, 0x0, 0x3, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x19}, {[@end, @end, @timestamp={0x44, 0xc, 0xc8, 0x0, 0x9, [0x4, 0xffffff6e]}, @timestamp={0x44, 0x18, 0x80, 0x0, 0xd, [0x97f, 0x6, 0x3, 0x4, 0x1]}, @lsrr={0x83, 0x1b, 0xb3, [@dev={0xac, 0x14, 0x14, 0x14}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x33}, @empty, @rand_addr=0x64010101, @multicast2]}, @rr={0x7, 0x7, 0x10, [@rand_addr=0x64010102]}, @ssrr={0x89, 0x1b, 0xdf, [@private=0xa010101, @rand_addr=0x64010100, @rand_addr=0x64010101, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}, @loopback]}, @lsrr={0x83, 0x23, 0xab, [@multicast1, @local, @multicast1, @local, @multicast1, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x19}, @multicast1]}]}}}}}) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001280)={r0, r1, 0x25, 0x2, @void}, 0x10) r3 = syz_open_dev$evdev(&(0x7f00000012c0), 0x7, 0xe000) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x0, 0x0, 0xcf, 0x8, 0x5}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000001980)={0x3ff, 0x0, &(0x7f0000001880)=[{&(0x7f0000001340)=""/234, 0xea}, {&(0x7f0000001440)=""/59, 0x3b}, {&(0x7f0000001480)=""/140, 0x8c}, {&(0x7f0000001540)=""/37, 0x25}, {&(0x7f0000001580)=""/255, 0xff}, {&(0x7f0000001680)=""/184, 0xb8}, {&(0x7f0000001740)=""/49, 0x31}, {&(0x7f0000001780)=""/29, 0x1d}, {&(0x7f00000017c0)=""/171, 0xab}], &(0x7f0000001940)=[0x15f3, 0xffff], 0x9}, 0x20) mount(&(0x7f00000019c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40)='jfs\x00', 0x800000, &(0x7f0000001a80)='syztnl1\x00') getsockname$tipc(r0, &(0x7f0000001ac0)=@name, &(0x7f0000001b00)=0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b80), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x3c, r4, 0x504, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x10000}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0xbf7}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x80, 0x1405, 0x800, 0x70bd28, 0x25dfdbfd, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40801}, 0x8084) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000001dc0)={0x1, 0x1}, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001fc0)={0x1, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001e00)=""/86, 0x56}, {&(0x7f0000001e80)=""/139, 0x8b}], &(0x7f0000001f80)=[0xffffffffffff5017, 0x3, 0x401], 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003200)={r0, 0x0, 0xfd, 0x1000, &(0x7f0000002000)="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", &(0x7f0000002100)=""/4096, 0x0, 0x0, 0xa1, 0x20, &(0x7f0000003100)="b6263fdd175e3eb43a81d4fbbc0b61b1eaa4f404625c9bd051f34e8347c5b4305eedf3b5337e21b01168b964cd9a23e8a3cadb4fd57476b4db83bd2000fa0d3548ca5e5abc32e262aa4f7ef3ac8d942337d0eb21ab898dfb927dd913bb3cbdac129a483a2822231e485071cc651aacb553bb25529d074e9a4e100a46fc5ea1124a8e81012d9bcfbeeb1f6ba710e0801e8c5e7935411680a1eef8c380ccace77054", &(0x7f00000031c0)="e547c219d19725de8940cf82f70120085f8679534dcf1af917635d7d081bc62f", 0x0, 0x0, 0x3}, 0x50) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000003340)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x4000008}, 0xc, &(0x7f0000003300)={&(0x7f00000032c0)={0x2c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r0}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x48d0) connect$inet6(r0, &(0x7f0000003380)={0xa, 0x4e22, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000033c0)={r0, r1, 0x25, 0x6, @void}, 0x10) r5 = accept4(r0, &(0x7f0000003400)=@ethernet={0x0, @dev}, &(0x7f0000003480)=0x80, 0x80000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000003500), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f00000035c0)={&(0x7f00000034c0), 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x24, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040804) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000037c0)={0x7468, 0x0, &(0x7f0000003740)=[{&(0x7f0000003600)=""/9, 0x9}, {&(0x7f0000003640)=""/17, 0x11}, {&(0x7f0000003680)=""/157, 0x9d}], &(0x7f0000003780)=[0x7fff, 0x2, 0x4], 0x3}, 0x20) execveat(r0, &(0x7f0000003800)='./file0\x00', 0x0, &(0x7f0000003a40)={[&(0x7f0000003840)='\x00', &(0x7f0000003880)='\x00', &(0x7f00000038c0)='ethtool\x00', &(0x7f0000003900)='\x00', &(0x7f0000003940)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', &(0x7f0000003980)='batadv\x00', &(0x7f00000039c0)='(--\x00', &(0x7f0000003a00)='/dev/input/event#\x00']}, 0x400) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000003ac0)={0x4, 0xfff}) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000003b00)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) unshare(0x0) socket$inet(0x2, 0x1, 0x7) executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x9b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 35: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x16, 0xf0060) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000040)=""/4096) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001140)={0x1, 0x5, &(0x7f0000001040)=[0xbe99, 0x2, 0x3, 0xaa, 0x6], &(0x7f0000001080)=[0x10, 0xfeaf], &(0x7f00000010c0)=[0x6, 0x5c, 0x0, 0x40, 0x9, 0x8, 0x3], &(0x7f0000001100)=[0x8, 0x0, 0x6, 0xf]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001240)={'ip_vti0\x00', &(0x7f0000001180)={'syztnl1\x00', 0x0, 0x10, 0x20, 0x8, 0x4, {{0x27, 0x4, 0x1, 0x9, 0x9c, 0x65, 0x0, 0x3, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x19}, {[@end, @end, @timestamp={0x44, 0xc, 0xc8, 0x0, 0x9, [0x4, 0xffffff6e]}, @timestamp={0x44, 0x18, 0x80, 0x0, 0xd, [0x97f, 0x6, 0x3, 0x4, 0x1]}, @lsrr={0x83, 0x1b, 0xb3, [@dev={0xac, 0x14, 0x14, 0x14}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x33}, @empty, @rand_addr=0x64010101, @multicast2]}, @rr={0x7, 0x7, 0x10, [@rand_addr=0x64010102]}, @ssrr={0x89, 0x1b, 0xdf, [@private=0xa010101, @rand_addr=0x64010100, @rand_addr=0x64010101, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}, @loopback]}, @lsrr={0x83, 0x23, 0xab, [@multicast1, @local, @multicast1, @local, @multicast1, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x19}, @multicast1]}]}}}}}) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001280)={r0, r1, 0x25, 0x2, @void}, 0x10) r3 = syz_open_dev$evdev(&(0x7f00000012c0), 0x7, 0xe000) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x0, 0x0, 0xcf, 0x8, 0x5}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000001980)={0x3ff, 0x0, &(0x7f0000001880)=[{&(0x7f0000001340)=""/234, 0xea}, {&(0x7f0000001440)=""/59, 0x3b}, {&(0x7f0000001480)=""/140, 0x8c}, {&(0x7f0000001540)=""/37, 0x25}, {&(0x7f0000001580)=""/255, 0xff}, {&(0x7f0000001680)=""/184, 0xb8}, {&(0x7f0000001740)=""/49, 0x31}, {&(0x7f0000001780)=""/29, 0x1d}, {&(0x7f00000017c0)=""/171, 0xab}], &(0x7f0000001940)=[0x15f3, 0xffff], 0x9}, 0x20) mount(&(0x7f00000019c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40)='jfs\x00', 0x800000, &(0x7f0000001a80)='syztnl1\x00') getsockname$tipc(r0, &(0x7f0000001ac0)=@name, &(0x7f0000001b00)=0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b80), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x3c, r4, 0x504, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x10000}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0xbf7}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x80, 0x1405, 0x800, 0x70bd28, 0x25dfdbfd, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40801}, 0x8084) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000001dc0)={0x1, 0x1}, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001fc0)={0x1, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001e00)=""/86, 0x56}, {&(0x7f0000001e80)=""/139, 0x8b}], &(0x7f0000001f80)=[0xffffffffffff5017, 0x3, 0x401], 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003200)={r0, 0x0, 0xfd, 0x1000, &(0x7f0000002000)="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", &(0x7f0000002100)=""/4096, 0x0, 0x0, 0xa1, 0x20, &(0x7f0000003100)="b6263fdd175e3eb43a81d4fbbc0b61b1eaa4f404625c9bd051f34e8347c5b4305eedf3b5337e21b01168b964cd9a23e8a3cadb4fd57476b4db83bd2000fa0d3548ca5e5abc32e262aa4f7ef3ac8d942337d0eb21ab898dfb927dd913bb3cbdac129a483a2822231e485071cc651aacb553bb25529d074e9a4e100a46fc5ea1124a8e81012d9bcfbeeb1f6ba710e0801e8c5e7935411680a1eef8c380ccace77054", &(0x7f00000031c0)="e547c219d19725de8940cf82f70120085f8679534dcf1af917635d7d081bc62f", 0x0, 0x0, 0x3}, 0x50) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000003340)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x4000008}, 0xc, &(0x7f0000003300)={&(0x7f00000032c0)={0x2c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r0}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x48d0) connect$inet6(r0, &(0x7f0000003380)={0xa, 0x4e22, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000033c0)={r0, r1, 0x25, 0x6, @void}, 0x10) r5 = accept4(r0, &(0x7f0000003400)=@ethernet={0x0, @dev}, &(0x7f0000003480)=0x80, 0x80000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000003500), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f00000035c0)={&(0x7f00000034c0), 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x24, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040804) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000037c0)={0x7468, 0x0, &(0x7f0000003740)=[{&(0x7f0000003600)=""/9, 0x9}, {&(0x7f0000003640)=""/17, 0x11}, {&(0x7f0000003680)=""/157, 0x9d}], &(0x7f0000003780)=[0x7fff, 0x2, 0x4], 0x3}, 0x20) execveat(r0, &(0x7f0000003800)='./file0\x00', 0x0, &(0x7f0000003a40)={[&(0x7f0000003840)='\x00', &(0x7f0000003880)='\x00', &(0x7f00000038c0)='ethtool\x00', &(0x7f0000003900)='\x00', &(0x7f0000003940)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', &(0x7f0000003980)='batadv\x00', &(0x7f00000039c0)='(--\x00', &(0x7f0000003a00)='/dev/input/event#\x00']}, 0x400) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000003ac0)={0x4, 0xfff}) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000003b00)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) unshare(0x0) socket$inet(0x2, 0x1, 0x7) executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101341) ioctl$USBDEVFS_IOCTL(r0, 0x80045515, 0x0) read$usbfs(r0, &(0x7f00000000c0)=""/39, 0x27) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061114c00000000008500000063522a035f00000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000100)=""/210, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xff000000, 0xffffffff, 'ipvlan0\x00', 'macsec0\x00', {}, {}, 0x67, 0x1, 0x40}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "bca95b91b2e840f98aafc5c24660edbb4e1d42a5b55184a18eeacfeed053"}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0xc2, {0x8}}}}, {{@ip={@multicast2, @multicast2, 0xff, 0xff000000, 'syz_tun\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x6, 0x3, 0x2}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000520004022abd7000fedbdf250a0800030009000000080006008000000008000100", @ANYRES32, @ANYBLOB="0e00020001040000000000"], 0x34}, 0x1, 0x0, 0x0, 0x42}, 0x40000000) write$binfmt_register(0xffffffffffffffff, &(0x7f00000006c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010065bd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="24002d8005000100030000000500040000000000080002"], 0x40}, 0x1, 0x0, 0x0, 0x24880}, 0x4000880) r5 = socket(0xf, 0x3, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000840)='net/udp6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000240)=0x85) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000600)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) mmap(&(0x7f0000611000/0x1000)=nil, 0x1000, 0x0, 0x20010, r1, 0xdefd6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000002dc0)=[{{&(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000940)="4422a2c520246020462a98869f259892bb60171f1b5035e2ebba27e3e8eac12ceead23b523c5e7b99951c6d34399f2692db3f2742a954a33261c059b41fe29dbb0f57483d0fb0597f805f80e83320bbb14058c08d67be1ab18006301ff2f21435fb1ea0357903e9a5e9eb559c02eb68f74dc78e59eb05720647290", 0x7b}, {&(0x7f0000000a00)="320202faa944b8a4b4b48b88842c9fed5ad54f7bc08d22c69f0034a1a378c7ce27a37be8f398443861f73e0f0d601159251728567aa672b9250b5cf39646e0fe7aa50ea58bb888d45c44a10f13f0e833f6bac78cc7f50630afe01eb59e8d95f5d1d94eec96fc3cf0e6efa44a98f0e7ce01a326e5bc00d5c8df70229de05a9e94b3ce913ec52c15e47d426b2374d7a258c763428ee8fff252885cae6546002d8fe16ef0c4358b5c961944", 0xaa}, {&(0x7f0000000ac0)="e8130e6b82e3370b01f6f1bfc144cfa3df0dd97095fb96b991ceafca9d", 0x1d}], 0x3, 0x0, 0x0, 0x4}}, {{&(0x7f0000000b40)=@file={0x0, './cgroup.cpu/cpuset.cpus/file0\x00'}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000bc0)="59c686f88a7bead12747cee70e7116ca4d4fd5007b96bad9e65c33fb9e8b6790e4d68382d74505ca046ea87e068a92c856c278dafec6379487a2d8f30de3fd0636d422b4e4be7076e0b9484aea3e4e742ab8557f2b736eb06e26d096ce783d5d0d3cc4f312a39b168e7cb08c1c0485ae955f66bfb60e43f50d3815da274310571c3016783b1605ef5fac328dc8ddab3db62c7fa7e541826ae42af57349cfed158717e684c162838b11e2d383df3ba3cbe0980410b4b11f5ef92b", 0xba}, {&(0x7f0000000c80)="2dfbd99d2030c84b6a75bffaa6b661e7f2fe6fec204967bdb30728d5df011e80e626c5ec45927abfeb17c6f92a2595e8adb5f0a24a1f40b95b56eed42abd01885f217c400fef94280cef5ac44202610cd9063fa41a1c15614d9ef840bd0166c02027b5f73bfdf8b59f5ca2937faef9cfe2255af9ba7076f701da50fd2b8bae1a4889bca407b7ec5dcfc13c2c80a8", 0x8e}, {&(0x7f0000000d40)="1608c14ad9aebdbb395221f9b9ac4cea6d70b7896a40838303ac4bcdc486ef8fa7f3ed81193dd9b053f336f2ee400a55aeb8b0975910046fb3f7a999c09a07c7316a2c6babd7065ddda4ef934dd6058facd2e0311573402979e461223a03d45b29132cb06d602b341ba9966dd669c9bf391d71ee3e8fc83d867ba29b3a3a0a7761f29365acf8be519b249f185b55ee7de8", 0x91}, {&(0x7f0000000e00)="0de063faa3ee177929990e67b52868132b4e7a94b3f6371bc706ef874169be3389e56cce40d4313f4e32d82ab8e8df839ed8941b5e77b673a74862", 0x3b}], 0x4, &(0x7f0000000f00)=[@rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30, 0x4004000}}, {{&(0x7f0000000f40)=@file={0x1, './cgroup.cpu/cpuset.cpus/file0\x00'}, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000001a40)="29ad4e57ea429b90dc661481ca3aa697203ac821efe0fd027639dd4b7b866602aac334cf5663684852d9c0c73ae751cb8c598e5913f0bd7a7975965ee62a8a7abf0b309f8635676cfd7b70a2df1b6cffdf0e088c4b675ecc6e8c4c0f2935b42717e3c924356dd8297dfc809059aed03d6de5c4b5eb3e099cb2707f6876e8c2fdfe5cbb2d145e405abf95932b043baf93cacdee5709cd2f0568b45990e1bd05298630c9354d686647a770d73078367b84c287e66530764eb44e3b9241350887066d2f8154c1ef149f573d09e75955af04d9d564d6305f85eb734004d401701e3ef0445fc3dadcb423c00c4cde2aaa11eb86603fc87aa51bb5ea72c844f2af8786752f78713ca4ed76f3f25d5495e452285fe48a7fc894c5643c9fc39e4bc6e75c1f83cf62c4eaa18698eb80e3764225fb6f95051def327dbefd2156d032b454ca65c0b25fe51446b5ad076d6691ed2a894fe6613dd0a07b6f8a44646e1ef789d9ae9cb608cbc78b61e5be2b1aad97bbc4c3ce5ef8a3210e1a44643a92dd51fe40649b88018287d1105355007066e8f93bc55265c1987b034b6bee54a482216fc305feb82e7ea4a7e061bf5dd3cd8d8698c2e6311b1b207ad39da5a68e259335d172737e15b0006345eeb2133294efd13d514e1b2b1d568cf5115949aea6e0fa0e428805fb60e90dab334311786550e0b32b3147a9dcf47d46a588013ba5dbf713c4c3b32f6280e90874151c833d7363c5b0c7799f71b83ae407e8d12ea0e2d125637886f88fc04bbb29ae7512a1a2662b63c65928153c663094866b19fe984b18cc4d28b9f5d8ef296262244b9a3d603ae5ce231704c411eb2877a33b57dd2954379d3e4c806c3157d59fc52fa9c48ea91376bda5e8c9ca029ac309a7a0139a6688f79eb45c0b6960f3052c757a2f1c8b9af2f59bf13f014a86e9b4e69bf163b846f6f2ecf6ffe800c6dc9134c0ef204ed20e8b0495dc71156cadce870881b59e7b8b0a6788f349f8cf1d35003df6d0a2b636286953b99c16b66e1b891a56edd0990d7b308a5eb14c8ba5854dea5573c4db31df0ec88fef76608cd4f2356b7a66e4f5669412423b24b77db879712060b99baa28e4a6b13437430756518bc57ad0f5321c3b8e8658912211d02a844fe6aafac74eb75815abbefc2e827682c0e1566fc38a3404c960263ce16495c40f83d1780c16a35f108ed99b2aa616fa22c4d6695e405fbbf23a04de85cc3820a9058938c11d06e145d06ef6993e11f69020ae2de3d881908a4f62ee1ba780eac60f09fb8d158de6d9ca67824ad65e2acefa814b4d51dab038f4af52f35045d4c67ab29ea834c38c716f72442b4baf2b49c8cfea891657cc213d56d398c77b1fc445786dda84ad89960d8e5c0ab013513c36353e3f38aaf125caf06bb6de81721492b223ffcf14ac8ea91d3bdf49076e591979c3945f5eb36f6f5035be5fa180bc043c4c161081b58c15d9c95e0cde0da7f1d22c19c0d9e40af623ea5739eb405d02cc1e115e3a921b7c69eb6bc0770b7e5d283300c2aea166c0de020da6e8c662730d88b76d6629821006af3e1c0971bb2347952c3b7923481802eeb7ade48a5de8759de3feb217f6d742edb0b46c1bf1ce6801bfbaacc62c01fa1c6babe0b35cbc8475870ceebef7bae4e85934a51835dedb5724470b66d6022dcaa695719c8b09e0506e64569ec1241d27f52fa723fd1ab250ddf5b42fbec944120a5bf473b9f3dc46a72fff209623d719dd3f688fb92bce700b8ee0b9f3f7019389802a426dc7d12733db2ae9f37050da1f9d7972d5cdd9a915ebc514948e70f9cc1309f78ea7ec874e98f43a2484dcfd03456822365a7fc7567d9975fe84e5f6ff5e4ad4de4aa809558314928120ac9105e154422e2d9cd99a41e8984367070e70b9aacd7e433959130e8a3e90dc216ad600dc5440c95802ee4c7fa865a7c88368b88d29d174bff2be11e22a58805c09450939a9042ddda7b91e8c387087f953bedb38bc019cc930507613c172ebfd299fe22ea095b32c48ffbb10b81e1df7c54ceff8b59b0757e76dc8a61cf4af9e5770bc90936061723e91ce2049d9c603a3f32e4f51288652746de4d6f9002cc0de511c5185946820bf1f29bf8970f912f3c15d292e9ec3265c859975b9845b794b6ae7aaf93def131f790e8b62dea2c2442a65713fed876c81ddd978378307d39b457c3f53bf5e92759ea56416777b5874c47f652c68aec75a4b04072f838de1f0a712b0860b1389e742ff743a5d718c6270865368d4e0519ba8afee764260a3e758782703e7f806cdb971c2f9ade112dfca778099587d156e1370010cbe3e71268f46c5351ba4a1d9b397f6ec207c6ab342304a96acd04cee05f3b0a8b4da73651435e6b71a2acfc9f3ff187a8250ed0ad088a89113a23be3b565e593c924cd35e25660b4d9e29d8423e6ecef35f79e56055547ee7bd5ff553c43e616211bb4b357604941209088122e1aab02fafb482b8a31d0ae4119dda8cc0de7b64354e16b2766755f0d791a4ba391004bbcb1251fe1db8335021d408284d0ac4d87fbc9b874d2886f5aa0d8497791083600c819def73aeff8469ba43aa49dc5fa394f9535b42d0e1f58361fd3e92cbdfb2684216a71d2551e4edd3bbdc26ce967aaad4cacffe9f92836ad8a66876ec38205b25a6ffb626fb6abd37f5466aeabe77e89de1525329ab6f3d8456becace50090a4357085da1ba47fc4aef65cc72a770dcd0e6f94967278c449aae730ee8cf410bce9e41fbe0264fa5484e2d87e3da957a3bbc40aaddce95a6ca4292f350e4a3a91a835ed7080312998d55b95051144709100e3603eff4b1b597db874c97c569e1b6f728e8f1c4bdee9c1d88942db1dedf825e80db8d165616d61dd63ddc606d43b1a2e5b201c1066656188134aadf4fb5a0996dc716fe497755bd250a41a86148a9ebde7c424b0f6ad14452d4d8b0962c1a66afb49bf8461675bc363632635f44b425692de5bace27f92a56c5ee54156a0d08b521bcb920d61fcb5cb4dcfc70a6df276127129e7b0a22f6740ffa64789d94da0ec3ab52f153e481dfacac42362d6fea3958a5f0265bb329170f3db688e7294dc83356027b808abf0f6d10287e999307ef6e8ff475915e553961e65ce55b3a3415c47c1e95d00213e539a78ea8a6983863b8b4635676fdab7993141cc89abb7387cb3a59cd6cb7189f38bf132c1db454314aad5ab1c684782ac25713130118083a774473676adb3b4d7a1bc5e6edb03f570b64ae5089d50174349708f2ba170fc85bbd5f5f303e9846fff39e2eb99b10eeb245febba96cb981636bb3ba1c83df61d310544417fbf435fd8508604abec319ccbf7009d3f0f27d04b1a698ad5b76abc083d6926fdca36366daaa1f27cc0b167d651ceaf4ee48186789b56c3d42566499ae1848788eba6f94836a70fa3b745dadb33fccbb978edbbbfc5fe72f70cb2d0a3a9b738858e1bbd2def02edafdd05aed853ae04f3c56e5cdf39ac3435453068f01035f4e37c6cc25aa16a80b0239ea3ccfd6dbcdc5588ecff82f674687fa8b9d542390dacdbc6647f32d270be1c3d129757256084c1ce501d03feffcf4adad987229af4c6507871391982ee19f59f41aad9418afa908b32154a13012a9f0da24da0a451acc6804c5193ab21d4d75e6c06edfe8ec95f7f8a8044aa73ec7d114dea6f7b44374f3f62938d5956103acb86397ce32e025848853bf63e7e2994faea6d31596eff1c73059751eea4a404138bd919a4ce8786de80e361a5fcfc129c23d6bae9430b203526a0feafe161910d2a6d4bd8319cce19f385529968b60eb38e995f9464267cdc51e1f5b94ab54d9f902c508c36cb2afb7aa26f45a2bd3b30217a6a611001a991bc2ba6431927ac57a292d7c1d7244bbc6c68a22a43ce500fd859fc13ab05fa4f52b122e4cd720c143218d8a8f5403d4bba3fe8c044059b9f7273bf0f2d0c74b7a052a4ed98304d41c2d9ce7cafd91ae796d6076f35915b52e603933642ac38e426aaffd57d84b0db99e98207142b6460b28d1d1c57d80c531112a2c3c90052520b7cb20585b92f91bb22968be48cbafc64d4c5bd6bd794e240cd70f291e1b62fea42996419811f05b1345239f6bf165fbc75267d9015a08ace60ce0da8b70cf5debac54d3fad0afdc083c175800ea3376be1dc9f771e57af3e30b18d57f1df2ef2430b574555e8aa7e859afdd3744e4d276b4b7f8f021f0aa7cd95778901026068254461c2636fa206734819b0f5833009578269183f8ef5f283165f4ac3ca4405a20fb2cefb132aeb0b55c7cc23f3b50f18af95dcd924dcb8dcd0112d835cfa79a942d66f220b4a77c622c303f37ad197d9ffd923de60b631d30fc35f2c46dc423840881f5930fe1fe4705013973425e3a8a0733efc2d69b1dc2390b3eff1c8e0e4608eda73161feb693702488bcfa36f0e7bb2d5d0930918debd8b5234042b357e56b3d76077d58c190efbed216ce94535559b8eb88fc25252d8a3e6bd3f63b15020475167730d90bc5e5dd60736977522643939bcbf57e830fe05accf4d06caf93a33b0b2eadde9bb13df90af396469e8818a81d94fd218afdf08fdf0e853e4785af0249415aae3c17263ff10df8243caca405ed4ff9278c15c8c25d02aa9d1070663cbaa4db8633e5b48fb19ddbeca573c7768ddaea2c44ba0b9ee48ff449705d1fa4a2978b509096807dc577ed79ce8efe593ab522cc4e22733c5ad8436fd3e1d1900d03602480994e7e7aae9b345e46284566f6908571bf71c560de787d6068c6ee54a116082898418d1f13bac08c8a5a49476128892aa78650ebc436ff614fc13e2231155e2e75a6c656d1b9b023ded8c4432b35ed9204f50a826069393440ad31f3e9329abd559eccf4b1df2f1cf6c77205dbb851f3280285d295a41132828eaf2694d7b7a7ebce39267ccb2da8fb6a50a44952baa5aaea5c147df24a6034c9b0ca0de01076ae9d5c71350a4c90af5ea05c51ee40ab2ce1a1b0b05be3d09170aee68d2c0153936dc9ac808968aada67e8223598be915cbb339da47cf01d5af81cc51882d285f49742e3c9527b0e28561fc6a3420839e80f209deb7e6fce14ab148024d59a00dfbd72848dd8d8e7fa836588ec628855e68dfaab1efee55549631806a9a5414ade2c43f49c3f69f859b68470a27c93c539ab19b2debb4554b9f15c79fc08a4eb46e7c59898dda49f6ed20f142d94328f2aaba99ab495dd342c50ce57431d2434a7062e8dd4be93b34b848cf4da84505ce660ddcc113fed6515d47eb367ca6ee5735c8b32cccca508edafeba8672665a370a0f179693013130428e06821a2144b9559bc72e302459fc9edb539b623153df0ecf92077701f5ea52465279d2aea06910a52252a37be0a24251c6adc0bbf1143fe3ace8ced28fc5e156306d004347fcf55b63723fb1b78360305b1c23a0dd0767466416907a9f0ad2a9f5111417e2f5027f02e961fbb1c721a8864895c51afd9a20a852f1ae9494e373e0a6472967e1a664f8876fb94692ccff0f2e0c5e9fb567d00c3f8d5afc717fe592c0bf30d2a45b77091a04889c453032c019cc856c76e8342addbf8a18670feef02745214cbdd99265825e8e4236c71b7c4e7d88ee3b66c670cf6421f0c8a29e93e1ad2ace89e637fe186d1cc77cf6f1bdfebf0f5167bc4484f69cc3de4da2bd21cbdb554eb4a46f7c3332953f1fbc87c0bae1f3429409fdc2cdc1c36963d0be1ae7c40e06adccdd1ab0fa68d0616273a40dfff2e120916dce7c94", 0x1000}], 0x1, &(0x7f0000002b00)=[@rights={{0x28, 0x1, 0x1, [r9, 0xffffffffffffffff, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r9, r9]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}], 0x60, 0x4008001}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002b80)="82a3b1ff73de72210a1101d32c6828a09c1e621096c8f983ebde0a6e89fb9d88fa0563007336c0a46582a1af88c181dfd3f5c22f475b613d65f15db3ecf341446b2d77a14c48d205ff8e792b23813e33ddfe185db1493c069c40e29e03fe18ea24f611fbef4e861a62ad51e5ed9a9c482a067ba008657c9a6b1fb8130a9cb638efb106e88971974d2d2595b587265c770b594e908a0806c1cbc0c1eb5d7401abe8cedb5e9a8fbcab73752212b1135c5fa7834c12bb535c9a6258bbc0d9991ffd6693493711f6a6b3eba4ad1216812de29095", 0xd2}, {&(0x7f0000002c80)="d053918b30a6cb65f7150fc28e3020413b1c428300aa8d161649f4537762f21bd523eb0d25131cc156a8905d463da525592cb3b9a1721e030c0630c3b3ca77e2257fc71a18bd3473cf2f227ba738fbdf1dae27acb6c5d8b499cc6f8ed01c4f01a6b78de6171ca348ff95d813c8cf6306064d0a5760fedb6c21a41eabbd1c3c565218814ed336b239b550905e093aff1d7a83e8f560b30bc2a751a81ac5cb298f9a22fca4aa82ecbca181302c8615628c22378809407141d733f6111486c5aabd46c3ce15bc6ca1810d24689021e7ea398a84d0927e2fd2109b7f6e22", 0xdc}], 0x2, 0x0, 0x0, 0x80}}], 0x4, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r10 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000540)="74202623f7fa74b7c7a1e61d6bbda8148fa322003e0e9e40ccec8da33a55962c647cae1cd27779e8f9a8fd92cf1305339fa8edc8da25cf1217fc520d0839ca398677b7ac299d2c95514beab515970fbf99df234fd36337cd812cc056330a23fa9c535b25af4cd40302082a4f53c257d102795332fe9f4727af6ff4b8238a92cde02d75dd72ff353714f74f5ed221", 0x8e, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r10, r10, r10}, &(0x7f00000000c0)=""/61, 0xfffffffffffffd7e, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r6, &(0x7f0000000040)={0xa0000012}) lsetxattr$system_posix_acl(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000bb9ba80ef1a26696478103853dbef7d1585f2a9203395d9f1a0fd75fd1a14107cc67a72a06438ec858069a9096ff2adc525ffaed7252362c0b03000000000035ddd6921c34", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB="10000000000000002000000000000000"], 0x3c, 0x0) executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xbe, &(0x7f0000000600)=""/190, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0x6, &(0x7f0000000180)={0x8, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)="b405426ea90c9dd15e8d6b355ba051445771151690b436201407e508117aca0e9a8b988458de96b43682c6c2f024aa871b130be21d3587d35de825956e5ca79a4a7c4e159e7dfba036cb993e4bf1b566eba433b6eb0262b872aee78af21be91cdfcd0a86456b399efa2ba0c35ac5cfb98a884693387bbdac145928b3c6cd38a1234f41363789b44b6799595894e2ee99b505f4f9", &(0x7f00000003c0)="140dbc1289210e3ca292eb589285134b909e9b82f71c748fca26876a6758ad5ad3d35a00390dfe82047a565842959bb7cd2acb9f56f724740353003f16b64905c2fb78f8466544f3ff67955a5494d053104443add5bf8397090c67a4c69a5d31fa770576f630fcda64a9547d4fc8ddf0d2188accf1f51832b838046a0886c2a3e40c5565521301f68aba3d89602997d78a510875b0b03b8afde573d9f70e4170ccafb589d577786cd719e768b733d48cbc2b6043b5a106f697568b6cc53dea", 0x5}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000006c0)="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", 0x100}], 0x1}, 0x0) unshare(0x28000600) clock_settime(0x1ed5d7403, &(0x7f00000000c0)) r6 = fsopen(&(0x7f00000001c0)='hpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x8e) unshare(0x4c040480) mknodat$loop(r7, &(0x7f0000000140)='./file0\x00', 0x4, 0x1) r8 = io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x10420, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r8, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) socket$nl_generic(0x10, 0x3, 0x10) executing program 6: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=@encrypted_new={'new ', 'default', 0x20, 'user:', '-\\}', 0x20, 0x9}, 0x2a, r0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x4002) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x84) r2 = syz_usb_connect$uac1(0x0, 0xe1, &(0x7f0000000140)={{0x12, 0x1, 0x311, 0x0, 0x0, 0x0, 0x20, 0x763, 0x1031, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcf, 0x3, 0x1, 0x2, 0x0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x33}, [@extension_unit={0xd, 0x24, 0x8, 0x2, 0x9, 0x2, "722a6563e097"}, @extension_unit={0xb, 0x24, 0x8, 0x4, 0x5, 0xbe, "b8661f08"}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x0, "0d4616e019e5"}, @selector_unit={0x6, 0x24, 0x5, 0x2, 0x3, 'e'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x6, 0x9, 0x7, "655375d3"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x4, 0x3, 0xf}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xb8, 0x4, 0x8, 0x2}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x81, 0x3, 0x5, 0x1, "cf"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0xc, 0x6, {0x7, 0x25, 0x1, 0xc, 0x7a, 0x101}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x4, 0x4, 0x8, 'N'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x0, 0x1, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xf, 0x400, 0x0, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x68, 0xff, 0x20, {0x7, 0x25, 0x1, 0x4, 0xb4, 0x7a9d}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x5, 0x3, 0x5, 0x20, 0x3}, 0x33, &(0x7f0000000280)={0x5, 0xf, 0x33, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x1, 0xf0f, 0x19, [0xc030, 0xff3e48, 0xc000, 0x47e35457c95de317, 0x82eb28b482bc1a0d, 0x1e]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x4, 0x13}]}, 0x5, [{0x5a, &(0x7f00000002c0)=@string={0x5a, 0x3, "1687ba907dcf811dd9a43a91f774cc78b812c5ca238092f5033c98674a06be6ad7909684bb63a0342a1c215e9f5daa4aae77be5c5d23a71e1d9745026771c0ccdaecee2d982afe8c690f2864f9eff65004f9aaa55c674589"}}, {0xb1, &(0x7f0000000340)=@string={0xb1, 0x3, "b6f97a47666b2a37760202c9f72200e7996316490d7af48fbe681c5cce7042f4f26c3550a2889452b57a38aacb785170138f026acf31d3e8ccb7e3d0a0173dbe45e2363863436cd3d4741ad6be87e54f738f4c158f50c9471cbcbe51d96b76cad602424efb70101ac7f11d0869c0f85ee5ca3ebb0f7420286302f0da6728ee0e47808ff3cbdd28e4228c5064206ea7374810c39080b65edbd14e83eedeed857661859c0dd7637c65221b4e41be7350"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x41a}}]}) syz_usb_control_io$uac1(r2, &(0x7f00000005c0)={0x14, &(0x7f0000000540)={0x20, 0x6, 0x3a, {0x3a, 0x23, "dd5c706baf4a6cbb7d857335c4508c574eed0da6303b460cfcc06578643328aeae701f19e1c3e1238055c120f9c607017262a3b45aa6640d"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000600)={0x20, 0x14, 0xed, "2b57b36c263551c9b9c9181bc329d2f77875eb0eb58c63af3cffde0ca22f6ef21527dacfa8b9755c71fa7e1bcb7ccd3cf11e9d893ae71fb3ce49c9e93df6ac27c24b76db8e3335d2f762a68b354d29c4b49cb81b4f910be5f1febc8b783abc76e75bc0d70f0967e8181cccdb742b9cf6cad61fa91fa5d7d9923cdad0a695d9842bbcb6f044e0129dd769381ab47a195e6f0f43581578c325c7d7b9fe4075e46f2e20366201f19e4ae349664ce2e12339c5602a5e78d8b8ef82840b7834e6d40f3007f16b9d3c0d3125c1dfe1619e0610ece610917dee88834f482267a6b662437a98656d8eb990e136a19c535f"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000780)={0x20, 0x81, 0x1, 'K'}, &(0x7f00000007c0)={0x20, 0x82, 0x1, "f0"}, &(0x7f0000000800)={0x20, 0x83, 0x2, '/['}, &(0x7f0000000840)={0x20, 0x84, 0x2, '6P'}, &(0x7f0000000880)={0x20, 0x85, 0x3, "83e09c"}}) syz_usb_connect$cdc_ncm(0x5, 0xa2, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x2, 0x1, 0x0, 0x110, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "10403362"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xfffffffd, 0x4, 0x80, 0x8}, {0x6, 0x24, 0x1a, 0x40}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0xd, 0x1, 0x4}, @mdlm={0x15, 0x24, 0x12, 0xd1}, @country_functional={0xa, 0x24, 0x7, 0x9, 0xe3, [0x3, 0x6cb3]}, @obex={0x5, 0x24, 0x15, 0x793}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0x40, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0xf7, 0x3a}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x1, 0x9, 0x5, 0x2, 0x8, 0xfc}, 0x2e, &(0x7f0000000a40)={0x5, 0xf, 0x2e, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0xa0, 0x0, 0x3, 0x1, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x0, 0x1, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x55, "1c95e2fc7e339339726b045b6786343f"}]}, 0x3, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x500a}}]}) r3 = msgget(0x0, 0x54) msgsnd(r3, &(0x7f0000000b80)={0x1, "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"}, 0x1008, 0x0) write(r1, &(0x7f0000001bc0)="cc13db4ad44f48673bc425b2f50e053f1b0233fd3dd45f90d2a03052e7434ba530a226dd55156c53acc81ac35bf885841babfff8f8e30db0c37d19f839f68a128b41bbf0f210714a48327c357740addac92c3550dd1c6953572a9bd99cf838d3b120ac425cd9b8d71432bf23", 0x6c) syz_create_resource$binfmt(&(0x7f0000001c40)='./file0\x00') msgctl$IPC_STAT(r3, 0x2, &(0x7f0000001c80)=""/180) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000001d40)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = syz_open_dev$ublk_chdev(&(0x7f0000002080), 0x0, 0x600) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000001d80)={0x0, 0x5e32, 0x200, 0x3, 0x287, 0x0, r1}, &(0x7f0000001e00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x294d, 0x4000, 0x2, 0x16a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x295c, 0x8000, 0x3, 0x262, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8ca8, 0x0, 0x0, 0x1d9, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7393, 0x80000, 0x3, 0x2bd, 0x0, r1}}], 0x4, &(0x7f00000030c0)={0x2e, 0x2, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x5}, 0x0, r7, '\x00', {0x3, 0x59d, 0x0, &(0x7f00000020c0)=@buf_1k="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"}}, &(0x7f0000003140)) msgctl$IPC_RMID(r3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000042c0)={0x4, 0x4, &(0x7f0000003180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7}, [@alu={0x7, 0x0, 0xd, 0x2, 0x2, 0xffffffffffffffde, 0x10}]}, &(0x7f00000031c0)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000003200)=""/4096, 0x41100, 0x8, '\x00', 0x0, @fallback=0x37, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0xa, 0x0, &(0x7f0000004200)=[{0x3, 0x2, 0x7, 0x4}, {0x3, 0x2, 0x1, 0xc}, {0x5, 0x3, 0x7, 0x5}, {0x5, 0x5, 0x3}, {0x0, 0x3, 0x10, 0x3}, {0x3, 0x3, 0xc}, {0x1, 0x3, 0x5, 0x9}, {0x0, 0x1, 0x4, 0x6}, {0x1, 0x4, 0xb, 0x9}, {0x5, 0x3, 0xe, 0x1}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004580)={r8, 0x0, 0xf, 0x4b, &(0x7f0000004380)="1b9d573a420ac8296b16d8751d94db", &(0x7f00000043c0)=""/75, 0x3, 0x0, 0xe3, 0x37, &(0x7f0000004440)="ecbcab84bc4092a81dbd144e80e90fd4001b3f90a6ec425b952bb9bf86028b4a274476214289e663aa167f7164e4958a044d9cfedeacdad564d4af2d4642ac76d434bb937f01aca76e3f4eca65e1589d24c1c243ec47001dc66f5e0b716f99889613f393d3422d327779d260114388eb3b8bb76ae8f3e78ad499599f66f1cf90744009f9f9e1b55124fe33c15c20fbf1a7d83c93881c85b8a3731fb4dd5cc765e56a7702199353015395fb0e41c5c13d064adc5ce8a093bcf8342e7a4a4ed2170225559d909b5074c04cb3db5f5fd8fc98d4c08b2268ccefadd448a138a539255f03d1", &(0x7f0000004540)="e9f111dfd526f197904b0bbf56a8cd9060ce1dbd89b05b49af733254209fdad231c2f24ad828032deadfd038117f5a988c27016e99d897", 0x4, 0x0, 0x5}, 0x50) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000004780)={0x0, 0x1, 0x0, &(0x7f0000004600)=[{}], 0x1, 0x0, &(0x7f0000004680)=[{}], 0x1, 0x0, &(0x7f0000004700)=[{}], 0x1, 0x0, &(0x7f0000004740)=[{}]}) read$FUSE(r1, &(0x7f0000004800)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000008880)=0x0) r12 = fcntl$getown(r6, 0x9) msgctl$IPC_SET(r3, 0x1, &(0x7f00000088c0)={{0x0, r9, 0xee00, r10, 0xee01, 0xc, 0x9877}, 0x0, 0x0, 0xf, 0x8, 0x40, 0x7, 0x100, 0xfdb4, 0xfff9, 0x5, r11, r12}) ioctl$KDMKTONE(r5, 0x4b30, 0x3ff) sched_setscheduler(r11, 0x3, &(0x7f0000008940)=0x1ff) socket(0x1a, 0x2, 0x9) sendmsg$nl_xfrm(r1, &(0x7f0000008b80)={&(0x7f0000008980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000008b40)={&(0x7f00000089c0)=@delsa={0x158, 0x11, 0x794, 0x70bd2b, 0x25dfdbfc, {@in6=@private2, 0x4d6, 0xa, 0x32}, [@algo_aead={0x6e, 0x12, {{'aegis128-generic\x00'}, 0x110, 0x120, "bae4f67d3317f10c0b0532f1b4903e2ca9c9b11bef9dab63d501b3215b432b48ee16"}}, @srcaddr={0x14, 0xd, @in6=@mcast1}, @replay_val={0x10, 0xa, {0x70bd29, 0x70bd26, 0xffff}}, @algo_crypt={0x9b, 0x2, {{'ecb-serpent-avx\x00'}, 0x298, "d45d2583ed992055d563dd5462e17a4b644e25a16aaa715818e65edd900d599cd4917fc49ffafb41cae37e26830a5344e2c82a426af75c7f4809d2481a67ef560c04b06b13970ac84d3b4eb4dff80caba5f988"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20008000}, 0xd840) executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@remote, @private0={0xfc, 0x0, '\x00', 0xff}, @empty, 0x9, 0x40, 0x0, 0x100, 0x0, 0xd0010b}) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x331020, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025647a31000000000900010073797a3000000000080005400000001c"], 0xe0}, 0x1, 0x0, 0x0, 0x4081}, 0x0) (async) ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, &(0x7f0000000040)) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) (rerun: 64) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/config.gz\x00', 0x0, 0x0) read$eventfd(r5, &(0x7f00000002c0), 0x8) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000300)={[{@abort}, {@acl}, {@oldalloc}, {@jqfmt_vfsv0}]}, 0x1, 0x5cb, &(0x7f0000000600)="$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") ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r9) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r10, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}]}, 0x3c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYRESDEC=r8, @ANYRES16=r7], 0x1c}}, 0x840) (async) write$nci(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="7105"], 0x148) executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/681], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2000}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xeff, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b9", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 5: r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0x8, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000008000000000000000000000000211df385", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)=r3}, 0x20) close(0x3) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0x7, 0x80000, r2}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x40, 0x700, 0x8, 0xe, {{0x3b, 0x4, 0x1, 0x6, 0xec, 0x64, 0x0, 0x1, 0x4, 0x0, @multicast2, @private=0xa010100, {[@ssrr={0x89, 0x13, 0x6f, [@loopback, @multicast1, @empty, @remote]}, @timestamp_addr={0x44, 0x4c, 0xc6, 0x1, 0x1, [{@multicast2, 0x8}, {@rand_addr=0x64010101, 0x3ff}, {@local, 0x351}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@loopback, 0x800}, {@local, 0x2}, {@multicast2, 0x2}, {@multicast2, 0xf}, {@rand_addr=0x64010102, 0x4}]}, @end, @timestamp={0x44, 0xc, 0xfd, 0x0, 0xa, [0x5, 0x80]}, @ssrr={0x89, 0xb, 0xe6, [@local, @loopback]}, @cipso={0x86, 0x5e, 0x0, [{0x5, 0x7, "cb9335514d"}, {0x2, 0xf, "d27f80cc8fbd4379d0d8777ee9"}, {0x0, 0x12, "3d944e32bb85e318f24edcd7adcf3b99"}, {0x7, 0x9, "d8666ca42e37b6"}, {0x7, 0xb, "99ff39926e420567b8"}, {0x5, 0xb, "cf343a1def1b6902c5"}, {0x0, 0x11, "f43ca8ac9c3d2de0bacf8378405ae3"}]}]}}}}}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000004800)={0x2020}, 0x2020) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x12, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xd70}, [@exit, @generic={0x2, 0x1, 0x5, 0x0, 0x3}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xe}]}, &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x10, '\x00', r5, @fallback=0x2d, r6, 0x8, &(0x7f0000000400)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x9, &(0x7f0000000480)=[r2, 0x1, r4, r2, r4, r4, r4, r4], &(0x7f00000005c0)=[{0x3, 0x5, 0x1, 0xb}, {0x2, 0x2, 0x1, 0x4}, {0x5, 0x3, 0xc, 0x2}, {0x1, 0x1, 0xe, 0x8}, {0x3, 0x4, 0xb, 0xc}, {0x1, 0x3, 0xe, 0x3}, {0x1, 0x4, 0x10}, {0x5, 0x3, 0x0, 0xc}, {0x2, 0x8000001, 0x7, 0x9}], 0x10, 0x200}, 0x94) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r8, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r9, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000100)=@nullb, r4, &(0x7f0000000280)={0x6, 0x6, 0x1}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") io_setup(0x6, 0x0) pipe2(&(0x7f0000000180), 0x80000) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x20, '\x00', 0x0, @cgroup_skb}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)="2a3a206782", 0x5) add_key(0x0, 0x0, &(0x7f0000000780), 0x0, 0xfffffffffffffffa) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000880), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) executing program 5: mbind(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x8, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000fff000/0x1000)=nil) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) brk(0x20ffc004) executing program 6: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x23}, [@ldst={0x1, 0x0, 0x1, 0x1, 0x1, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f}, 0x94) executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_getnexthop={0x34, 0x6a, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}]}, 0x34}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x6, &(0x7f00000000c0)={0x90, {{0x29, 0x0, 0x3e000000, @mcast1}}, {{0xa, 0x4e20, 0xfffffffe, @remote, 0x6}}}, 0x108) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) ioctl$IOC_PR_RELEASE(r4, 0x401070ca, &(0x7f0000000040)={0x4, 0x7, 0x1}) writev(r1, &(0x7f0000000480), 0x0) executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r5], 0x48}}, 0x0) executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xfffffee2) r5 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000480)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) splice(r0, 0x0, r3, 0x0, 0x38f9, 0x0) splice(r2, 0x0, r1, 0x0, 0x7fffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) r7 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x9, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r7, 0x1, 0x1, 0x1, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r11, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000001fc0)=@ethtool_cmd={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2c, 0x0, 0xfffe}}) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_open_dev$vim2m(&(0x7f0000000000), 0x25, 0x2) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x28, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x16, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000087000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003a00"}]}}]}, 0x170}}, 0x0) executing program 6: syz_emit_ethernet(0xfc0, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xf8a, 0x11, 0x0, @private2, @mcast2, {[@srh={0x62, 0x0, 0x4, 0x0, 0x3, 0x0, 0x8}], {0x4e21, 0xe22, 0xf82, 0x0, @gue={{0x1, 0x0, 0x2, 0x9, 0x100, @void}, "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"}}}}}}}, 0x0) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000090c0000af9b0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028006001900040000000500010004000000"], 0x44}}, 0x0) executing program 6: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) (async) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000200)='./file0\x00', 0x81, &(0x7f0000000500)=ANY=[], 0xfa, 0x2c0, &(0x7f0000000480)="$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") (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) getdents64(r1, &(0x7f0000000000)=""/134, 0x86) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r3 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x6000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x1}) (async) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) (async) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fcntl$setsig(r7, 0x3, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000140)=0x81) (async) r8 = dup(r2) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x1c3040, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r11, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="f8ffffff0000000000000000070000000000000099dc50b4797f297303a15482b6231e110858b5b35c3c043552145248e16ebd3ed2e6640230b615d93e76db1014a5af97edf7fcdea7ed52d49aaab0da98a80a0d544bc778e518dfcc63e00f4b8d998bcb010b46130ea1fcdf45e7a1d34d0aec059163c906499f7010bf393578db4cb4ab8022ae5a8f6775eb3b7416b33d8e79e2c15473e17e0cccbfb17fee9dc37e9a8475aa005527f303485d7c4fe71b0b3668", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000500"/28], 0xc) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x1, 0x2, 0x81, 0x0, 0x7, 0x0}) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000040)=0x3641) (async) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0xfffffffffffffe27}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000180)=0x1, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xfff2, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x804, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x284, &(0x7f0000001d00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_genetlink_get_family_id$team(&(0x7f0000000140), r4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000b00)={'syztnl0\x00', r3, 0x1, 0x80, 0x6, 0xff, {{0x1f, 0x4, 0x1, 0x7, 0x7c, 0x64, 0x0, 0xa, 0x29, 0x0, @private=0xa010100, @broadcast, {[@timestamp_addr={0x44, 0x4, 0x5b, 0x1, 0x1}, @ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0x14, 0xd8, 0x1, 0x9, [{@multicast1, 0x10001}, {@local, 0x7}]}, @generic={0x86, 0x9, "cbbff81d041802"}, @timestamp_prespec={0x44, 0x34, 0xcd, 0x3, 0x8, [{@loopback, 0xd773}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xeb7}, {@loopback, 0x40}, {@rand_addr=0x64010101, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x1}]}, @lsrr={0x83, 0xb, 0x7f, [@loopback, @multicast2]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000004c0)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000580)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000003c0)={'sit0\x00', &(0x7f00000005c0)={'gre0\x00', r3, 0x8, 0x10, 0xfffffc00, 0x7, {{0x1d, 0x4, 0x3, 0x8, 0x74, 0x66, 0x0, 0xee, 0x29, 0x0, @empty, @local, {[@timestamp_prespec={0x44, 0x14, 0xb8, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@multicast1, 0x81}]}, @cipso={0x86, 0x3d, 0x3, [{0x6, 0x2}, {0x0, 0x8, "40016cf6cac8"}, {0x1, 0xd, "3c1bbc880beccb130515bc"}, {0x5, 0xa, "219329936e61bc6c"}, {0x7, 0x5, "6c551e"}, {0x5, 0x11, "62d44028d7704e182e788b3534c1f4"}]}, @lsrr={0x83, 0xf, 0x24, [@loopback, @rand_addr=0x64010101, @loopback]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'ip6tnl0\x00', r3, 0x29, 0x2, 0x1, 0x7ff, 0x42, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x700, 0x81, 0x3}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140044a60000100001000000005f000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000008327020900020873797a31005fd7870300000008000a40fff7fffc400000000c0a01010000000000001f000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001000000000000000000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4044044) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a000001894426b82af0e2e5bd2f52b0037eb00900020073797a3100"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x4008880) close(r5) recvfrom(r6, 0x0, 0x0, 0x40002062, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'ip6_vti0\x00', r3, 0x29, 0x8, 0x2, 0x3, 0x40, @private1, @loopback, 0x8, 0x8, 0x93, 0x8}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r8, @ANYBLOB="000a000000000000180012800e000100697036677265746170000000040002801c001a"], 0x54}}, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class bisect: bisecting 49 programs bisect: split chunks (needed=false): <48> bisect: split chunk #0 of len 48 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=38s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30, 2, 30, 30, 20, 8, 12, 6, 27, 17, 20, 30, 2, 30, 4, 30, 30, 30, 23, 5, 22, 29, 8, 1, 2, 12, 16, 30, 3, 23, 30, 30] detailed listing: executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) (async) acct(&(0x7f0000000740)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00') (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (rerun: 64) mq_timedreceive(r2, 0x0, 0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) (async) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x5, &(0x7f0000000780)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r2], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000180)=0x3, 0x4) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xe4dcbaa0db43574f}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x3e, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x4c}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2c3f, 0x3, 0x20000000, 0x2, 0x7}, 0x1e}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r0) (async) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async, rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) (async) r11 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5pC\n\x00p\xf0\b\x84\xa2m\x00\v\x18\x004y\xa3y\xdb\xd1\xa7\xf1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=P\x03\xcdJ\x04K\x98\xaeph\xc9?\xa0[\xb1\xc8`\xcc\xd8\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\x06\xb2\xcc~\x95\xdf\xe7\xe5\xaeLl\x86(\xec\xac\xe33\x8a\x11\xd3\xfb\x9b\x1b,C\x05\xa4\x88I\xe1,W\xd7\xfcA\xa0\x06\xc3\xbc0\xf4\xfd\xcc\x8d\x01k|B2{ZVU&\xe8\xfd\xd0\v\xdb\xc8\x98\xd2\xd1\xcf8%d-\n\x971\xa8\xe2\xc1\x9fH\x9e\x8a\xfbSe\x1b\x97\xed\x18\x8f\x1a\xc1s,\xe7\x89\xbb\x1dU\f\xc1\x9682\xa4\x12u\xaa\xb6\xdel\x14\xdap\bA\xa7w\xd9\xff\v\xd0)\xc3\xfb|\xba&\xf5\xe4k\xec7u\xb3\xd1\fv^\x0ei\xd5\xd8\xda0$l\x9b\xc1\x89eu\xba\xfa\xd3/>@\xdb\xaa \a\xe1\x1a\xdc|\xb3\xe8\xa4\x06\x91s\x17{:\xfb\bw\xb0V\x97\xe0j\xee~\xa6eV\x0f\x94|\xdc\x13jQ\xc0`\x90\x80cfW^p]~kL\xcbh\xb4o8\xbe\xc2\x17\xb1\x9d\x1f\b<\x18\xee\xea\xbe\xcbG\xf7H\'f@F\aO\x830&\xab^\xa3\xe0\x1c\xa0\xe2\xf4?\x02!zJ\n\x11\x86\x86\xc9\x16\x10\x16\'Q\x7f\xd3\xd4\xe6\xfe\x89S\x8cw\xca\xce\x00\x00\x00\x00\x00\x00\x00\x00\x00]7\xb7\xc4\x866x2MQ2\xb5\xda\x19\xf8\xc0\xeaT\xc0-\xd3h\xcd', 0x0) fallocate(r11, 0x0, 0x100, 0x9) pread64(r11, &(0x7f00000000c0)=""/91, 0x5b, 0xf) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) sendto$packet(r8, &(0x7f00000002c0)="05031c00d3fc14a888004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) executing program 34: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) (async) acct(&(0x7f0000000740)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00') (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (rerun: 64) mq_timedreceive(r2, 0x0, 0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) (async) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x5, &(0x7f0000000780)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r2], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000180)=0x3, 0x4) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xe4dcbaa0db43574f}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x3e, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x4c}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2c3f, 0x3, 0x20000000, 0x2, 0x7}, 0x1e}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r0) (async) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async, rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) (async) r11 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5pC\n\x00p\xf0\b\x84\xa2m\x00\v\x18\x004y\xa3y\xdb\xd1\xa7\xf1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=P\x03\xcdJ\x04K\x98\xaeph\xc9?\xa0[\xb1\xc8`\xcc\xd8\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\x06\xb2\xcc~\x95\xdf\xe7\xe5\xaeLl\x86(\xec\xac\xe33\x8a\x11\xd3\xfb\x9b\x1b,C\x05\xa4\x88I\xe1,W\xd7\xfcA\xa0\x06\xc3\xbc0\xf4\xfd\xcc\x8d\x01k|B2{ZVU&\xe8\xfd\xd0\v\xdb\xc8\x98\xd2\xd1\xcf8%d-\n\x971\xa8\xe2\xc1\x9fH\x9e\x8a\xfbSe\x1b\x97\xed\x18\x8f\x1a\xc1s,\xe7\x89\xbb\x1dU\f\xc1\x9682\xa4\x12u\xaa\xb6\xdel\x14\xdap\bA\xa7w\xd9\xff\v\xd0)\xc3\xfb|\xba&\xf5\xe4k\xec7u\xb3\xd1\fv^\x0ei\xd5\xd8\xda0$l\x9b\xc1\x89eu\xba\xfa\xd3/>@\xdb\xaa \a\xe1\x1a\xdc|\xb3\xe8\xa4\x06\x91s\x17{:\xfb\bw\xb0V\x97\xe0j\xee~\xa6eV\x0f\x94|\xdc\x13jQ\xc0`\x90\x80cfW^p]~kL\xcbh\xb4o8\xbe\xc2\x17\xb1\x9d\x1f\b<\x18\xee\xea\xbe\xcbG\xf7H\'f@F\aO\x830&\xab^\xa3\xe0\x1c\xa0\xe2\xf4?\x02!zJ\n\x11\x86\x86\xc9\x16\x10\x16\'Q\x7f\xd3\xd4\xe6\xfe\x89S\x8cw\xca\xce\x00\x00\x00\x00\x00\x00\x00\x00\x00]7\xb7\xc4\x866x2MQ2\xb5\xda\x19\xf8\xc0\xeaT\xc0-\xd3h\xcd', 0x0) fallocate(r11, 0x0, 0x100, 0x9) pread64(r11, &(0x7f00000000c0)=""/91, 0x5b, 0xf) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) sendto$packet(r8, &(0x7f00000002c0)="05031c00d3fc14a888004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0x2, 0x4e24, 0xfffffff9, @local}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r2, 0x110, 0x7, 0x0, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r5, 0x0, 0x0) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x1, {0x176e19c8f85d2a1e, 0xf0, 0x6}, 0x2}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000180)={0x1d, r9, 0x1, {0x1, 0xf0, 0x1}, 0xff}, 0x18) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r9, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r11) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r13) socket$nl_route(0x10, 0x3, 0x0) executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xf7}, "573211faaa0aa68195dd33a0c39dbaf32addb290a5aa3b0067946ce95a5758eac25ae2a4d30abb3c28a88cf34129d20324f8ffb75799cfe2f0a8497640045d0d1190f222f0258be50d57b7634d3c43f859670775eb491ac80f8b9feebdee7b7be070a753126f8724405bbb3292cebc44e97cd771f2c0d148bef03bdec3f24827b12e6a962e38c0dfaa211a8998a906cef52c88a4e59cda914d4be5cfcff1063a39ce4f9155ec2b11d3847852f5c0b976a64161149a8d968b8c867338f5fc89f3fa15e1e0109e76e5190413a8a4da6bdc0248594cd6ff912595a119d2a31766e2ecc763205d871f3965929d5ef382d0eb10f8d77390f321"}, 0xfb) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x420400, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x94082, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x6, 0xa4e03) ioctl$HIDIOCGFLAG(r3, 0x8004480e, &(0x7f0000000200)) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000280)={0x0, r2, 0xfffffffffffffffd, 0x7fffffffffffffff, 0xffffffffffffffff, 0x401}) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f00000002c0)=""/227) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x40, 0x8000, 0xd, 0xbf3, {{0x14, 0x4, 0x2, 0x39, 0x50, 0x65, 0x0, 0x46, 0x29, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x44}, {[@generic={0x44, 0x9, "5e1eaf266a1604"}, @timestamp={0x44, 0xc, 0xdf, 0x0, 0x8, [0x3, 0x7]}, @timestamp_addr={0x44, 0xc, 0xf1, 0x1, 0x5, [{@broadcast, 0x2e61}]}, @lsrr={0x83, 0x17, 0x89, [@private=0xa010101, @private=0xa010102, @multicast2, @remote, @multicast1]}, @end]}}}}}) sendmsg$nl_route(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=@newneigh={0x98, 0x1c, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, r4, 0x4, 0x18, 0xa}, [@NDA_SRC_VNI={0x8, 0xb, 0x7}, @NDA_CACHEINFO={0x14, 0x3, {0xffffffff, 0x5, 0xf, 0x7fffffff}}, @NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NDA_NH_ID={0x8, 0xd, 0x2}, @NDA_VNI={0x8}, @NDA_LLADDR={0xa, 0x2, @local}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xf9}]}, @NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @NDA_PROTOCOL={0x5, 0xc, 0x7}, @NDA_NH_ID={0x8, 0xd, 0x9}]}, 0x98}}, 0x40) r5 = socket$netlink(0x10, 0x3, 0x4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000600)={0x0, 0x400}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000680)={r6, 0x4, 0x4, 0x5, 0x6, 0x8}, &(0x7f00000006c0)=0x14) ioctl$XFS_IOC_FSGROWFSLOG(r3, 0x4008586f, &(0x7f0000000700)={0x0, 0x5}) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x3c) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) fdatasync(r7) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000740)={r6, 0xfff9, 0x4, [0x6, 0x1, 0x9, 0x80]}, &(0x7f0000000780)=0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x140a, 0xe21, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x200440d1}, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, 0x1402, 0x8, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x8) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000a40)={0x5, &(0x7f0000000a00)=[{}, {}, {}, {}, {}]}) syz_genetlink_get_family_id$smc(&(0x7f0000000a80), r5) r9 = syz_open_dev$usbfs(&(0x7f0000000d00), 0x6, 0x20081) sendmmsg$unix(r1, &(0x7f0000000dc0)=[{{&(0x7f0000000ac0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000b40)="d98878fe9acb269c0c89bd81557d82c9ebef3183ffa170cd0ea8e20377364ac04897488e0f3792f738eab5217650f01641bdc5d9e1c6328859123126391d63454f9a72e914a1faab404dbc3e435a8dd095601b3937f3beeb880e55495b464910c9632cb12f43f7d9f5d40b0b86cd41e770553be542ba0a01e8740ab1adabe9b6c9862d1b6a195d150fc684632b81f4b045702d21b60d31c7d763fbcc2d699eefd625e9abd3b3b9d7c198e7e65b5271f84af15a122781fd55cecdc97f96d205a055f183082bb9549d9a1efa45ea7db72e53a50a8c1e41c6994e", 0xd9}, {&(0x7f0000000c40)="9b599a0dd982736f2cedd95a4efcb62ea1fa69da1a6a8c989781321018cde0296540a686c104a529f74e74e2d3c37999681e01610571ecbb1a9d10a14395c22ba907f431be055da87a2d25cd4536ba73b67a789a3cbe98728ab3c598e6950b94cc27c242d5f5ddfce8b20c83", 0x6c}], 0x2, &(0x7f0000000d40)=[@rights={{0x14, 0x1, 0x1, [r8]}}, @rights={{0x18, 0x1, 0x1, [r9, r8]}}, @rights={{0x1c, 0x1, 0x1, [r3, r8, r8]}}], 0x50, 0x4010000}}], 0x1, 0x8800) write$make_it_fail(r1, &(0x7f0000000e00)='0\x00', 0x2) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000e40)={0xaa, 0x4}) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='100\x00', 0x3) mmap(&(0x7f0000000000/0x1000000)=nil, 0x10000000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x1000000)=nil, 0x10000000, 0xe) madvise(&(0x7f0000000000/0x1000000)=nil, 0x10000000, 0x17) madvise(&(0x7f0000000000/0x1000000)=nil, 0x10000000, 0x15) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@grpid}, {@jqfmt_vfsv0}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") mkdirat(r0, &(0x7f0000000180)='./proc/sys/vm/compaction_proactiveness\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x1, 0x0) (async) write(r0, &(0x7f0000000100)='100\x00', 0x3) (async) mmap(&(0x7f0000000000/0x1000000)=nil, 0x10000000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x1000000)=nil, 0x10000000, 0xe) (async) madvise(&(0x7f0000000000/0x1000000)=nil, 0x10000000, 0x17) (async) madvise(&(0x7f0000000000/0x1000000)=nil, 0x10000000, 0x15) (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@grpid}, {@jqfmt_vfsv0}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") (async) mkdirat(r0, &(0x7f0000000180)='./proc/sys/vm/compaction_proactiveness\x00', 0x1ff) (async) executing program 1: syz_emit_ethernet(0x200000, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x40106183, &(0x7f00000000c0)={@none, 0x1}) unshare(0x400) landlock_restrict_self(r0, 0x2) executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0) executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="95ff8a492bf79006e8b47d1df2d48444a8b9c53057f1341766db2f1d87d894c942b366bf37c4ee87ecdf3fe0eceaf774d8efc4dfb05256e3661d83db19439424cc74", @ANYRES16=r1, @ANYBLOB="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"], 0xf4}, 0x1, 0x0, 0x0, 0x8c0}, 0x20040084) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc08958fb61362d40, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100000fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000003100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x84, r2, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x8020) executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents64(r2, &(0x7f0000000000)=""/90, 0x5a) getdents64(r2, 0x0, 0x0) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000030c0)) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000003100)={0xffffffffffffffff}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2, 0x2) setrlimit(0x40000000000008, &(0x7f0000000000)) setresuid(0x0, 0xee01, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0xa0, 0x33, 0x107, 0xfffffffe, 0x4, {0x2, 0x7c}, [@nested={0x8c, 0x1, 0x0, 0x1, [@typed={0x88, 0x7, 0x0, 0x0, @str='\x80\nK\x81y\xa1\x8d\xa8\x94\xfcA\xcdv]\x12\xa6VOd\x14LzO\x14DB\x8b\x06p\x0e\xc4\x91\xef*\x82\xf4\xa5\xae\a\x06\xcf\x1c\x1ey1x\xb2O\xd1\x93[\xb51\xb7D/\xecC\xc9\xbc\x84@\x8e\x95\x80i\x90h\xfcv\x9b~\x88\xf9\x04.\xfd\x889\x01y\x99\r\x1b\xbb\xd8\x967A\xc8\x94(k\xd1\xcdf\x85H|\x95\xbe\xa0\xf7\x84\xc6\xca\x85m\xa6\xe0\x7f\xbfb\v\xdd\xfc\x94\x82\x8c\xb1\x1d\t4S\xe2\xbe\xb2\xcd.\xc9\x1b\xbd'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x815}, 0xc000) ioctl$XFS_IOC_READLINK_BY_HANDLE(r4, 0xc038586c, &(0x7f0000000440)={r6, &(0x7f0000000280)='9p\x00', 0x200400, &(0x7f00000002c0)={@_ha_fsid={[0xfffffeff, 0x8]}, {0xecc, 0x8, 0x6, 0x800}}, 0x6, &(0x7f0000000340), &(0x7f00000003c0)=0x2}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write(r5, &(0x7f0000000400)='!*:n_existent_event:mod:', 0x18) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003180)=@RTM_GETNSID={0x54, 0x5a, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NETNSA_PID={0xffffffffffffffeb, 0x2, r1}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_FD={0x8, 0x3, r2}, @NETNSA_FD={0x8, 0x3, r3}, @NETNSA_PID={0x8, 0x2, r1}, @NETNSA_FD={0x8, 0x3, r5}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r7) r8 = socket(0x11, 0x2, 0x20000000) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f00000004c0)=0x517, 0x4) r9 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0xff}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}}) executing program 7: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x121000, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f00002e1000/0x3000)=nil) mremap(&(0x7f0000e1b000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000f2b000/0x4000)=nil) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x4}) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000040)={{0x7, 0x0, 0xffffffff, 0x2, 0x1}, [{0x2, 0x6, 0x3, 0xe}, {0xa86, 0x80, 0x8, 0x2}, {0x9, 0x0, 0x28, 0x3}, {0xa60, 0x7, 0x0, 0x6}]}) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) r3 = io_uring_setup(0x5b3c, &(0x7f0000000280)={0x0, 0x5199, 0x2, 0x2, 0x1e8}) mmap$IORING_OFF_SQ_RING(0x0, 0x80000001, 0x0, 0x11, r3, 0x0) executing program 7: syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="2cff16dfca9241ad7e072e98ba64eabf7227969cc6f846c59e0928963a88c1825403a9cd9733739e5c18843e5bfbec4fcccebf7d96d6a14916e01dd491d1b40a45883855aadaadb4b494b9d6fdeed874eae609bd8ac34114acf393f0fbe7e9f3ae0cac5b52f60c06c7a5d1e7cfd4e12a5fc0d79b3568582b7fdb738d93ca77bc8ae4"], 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v'], 0x50) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) sendmsg$inet(r2, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000140)="81", 0x1}, {&(0x7f0000001900)="879dda0ac3ec0d88", 0x8}], 0x2}, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r2}, 0x20) recvfrom$inet(r2, &(0x7f0000000200)=""/47, 0x2f, 0x10001, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRESOCT, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRESOCT, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x800) executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x16, 0xf0060) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000040)=""/4096) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001140)={0x1, 0x5, &(0x7f0000001040)=[0xbe99, 0x2, 0x3, 0xaa, 0x6], &(0x7f0000001080)=[0x10, 0xfeaf], &(0x7f00000010c0)=[0x6, 0x5c, 0x0, 0x40, 0x9, 0x8, 0x3], &(0x7f0000001100)=[0x8, 0x0, 0x6, 0xf]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001240)={'ip_vti0\x00', &(0x7f0000001180)={'syztnl1\x00', 0x0, 0x10, 0x20, 0x8, 0x4, {{0x27, 0x4, 0x1, 0x9, 0x9c, 0x65, 0x0, 0x3, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x19}, {[@end, @end, @timestamp={0x44, 0xc, 0xc8, 0x0, 0x9, [0x4, 0xffffff6e]}, @timestamp={0x44, 0x18, 0x80, 0x0, 0xd, [0x97f, 0x6, 0x3, 0x4, 0x1]}, @lsrr={0x83, 0x1b, 0xb3, [@dev={0xac, 0x14, 0x14, 0x14}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x33}, @empty, @rand_addr=0x64010101, @multicast2]}, @rr={0x7, 0x7, 0x10, [@rand_addr=0x64010102]}, @ssrr={0x89, 0x1b, 0xdf, [@private=0xa010101, @rand_addr=0x64010100, @rand_addr=0x64010101, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}, @loopback]}, @lsrr={0x83, 0x23, 0xab, [@multicast1, @local, @multicast1, @local, @multicast1, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x19}, @multicast1]}]}}}}}) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001280)={r0, r1, 0x25, 0x2, @void}, 0x10) r3 = syz_open_dev$evdev(&(0x7f00000012c0), 0x7, 0xe000) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x0, 0x0, 0xcf, 0x8, 0x5}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000001980)={0x3ff, 0x0, &(0x7f0000001880)=[{&(0x7f0000001340)=""/234, 0xea}, {&(0x7f0000001440)=""/59, 0x3b}, {&(0x7f0000001480)=""/140, 0x8c}, {&(0x7f0000001540)=""/37, 0x25}, {&(0x7f0000001580)=""/255, 0xff}, {&(0x7f0000001680)=""/184, 0xb8}, {&(0x7f0000001740)=""/49, 0x31}, {&(0x7f0000001780)=""/29, 0x1d}, {&(0x7f00000017c0)=""/171, 0xab}], &(0x7f0000001940)=[0x15f3, 0xffff], 0x9}, 0x20) mount(&(0x7f00000019c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40)='jfs\x00', 0x800000, &(0x7f0000001a80)='syztnl1\x00') getsockname$tipc(r0, &(0x7f0000001ac0)=@name, &(0x7f0000001b00)=0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b80), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x3c, r4, 0x504, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x10000}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0xbf7}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x80, 0x1405, 0x800, 0x70bd28, 0x25dfdbfd, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40801}, 0x8084) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000001dc0)={0x1, 0x1}, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001fc0)={0x1, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001e00)=""/86, 0x56}, {&(0x7f0000001e80)=""/139, 0x8b}], &(0x7f0000001f80)=[0xffffffffffff5017, 0x3, 0x401], 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003200)={r0, 0x0, 0xfd, 0x1000, &(0x7f0000002000)="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", &(0x7f0000002100)=""/4096, 0x0, 0x0, 0xa1, 0x20, &(0x7f0000003100)="b6263fdd175e3eb43a81d4fbbc0b61b1eaa4f404625c9bd051f34e8347c5b4305eedf3b5337e21b01168b964cd9a23e8a3cadb4fd57476b4db83bd2000fa0d3548ca5e5abc32e262aa4f7ef3ac8d942337d0eb21ab898dfb927dd913bb3cbdac129a483a2822231e485071cc651aacb553bb25529d074e9a4e100a46fc5ea1124a8e81012d9bcfbeeb1f6ba710e0801e8c5e7935411680a1eef8c380ccace77054", &(0x7f00000031c0)="e547c219d19725de8940cf82f70120085f8679534dcf1af917635d7d081bc62f", 0x0, 0x0, 0x3}, 0x50) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000003340)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x4000008}, 0xc, &(0x7f0000003300)={&(0x7f00000032c0)={0x2c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r0}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x48d0) connect$inet6(r0, &(0x7f0000003380)={0xa, 0x4e22, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000033c0)={r0, r1, 0x25, 0x6, @void}, 0x10) r5 = accept4(r0, &(0x7f0000003400)=@ethernet={0x0, @dev}, &(0x7f0000003480)=0x80, 0x80000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000003500), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f00000035c0)={&(0x7f00000034c0), 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x24, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040804) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000037c0)={0x7468, 0x0, &(0x7f0000003740)=[{&(0x7f0000003600)=""/9, 0x9}, {&(0x7f0000003640)=""/17, 0x11}, {&(0x7f0000003680)=""/157, 0x9d}], &(0x7f0000003780)=[0x7fff, 0x2, 0x4], 0x3}, 0x20) execveat(r0, &(0x7f0000003800)='./file0\x00', 0x0, &(0x7f0000003a40)={[&(0x7f0000003840)='\x00', &(0x7f0000003880)='\x00', &(0x7f00000038c0)='ethtool\x00', &(0x7f0000003900)='\x00', &(0x7f0000003940)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', &(0x7f0000003980)='batadv\x00', &(0x7f00000039c0)='(--\x00', &(0x7f0000003a00)='/dev/input/event#\x00']}, 0x400) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000003ac0)={0x4, 0xfff}) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000003b00)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) unshare(0x0) socket$inet(0x2, 0x1, 0x7) executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x9b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 35: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x16, 0xf0060) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000040)=""/4096) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001140)={0x1, 0x5, &(0x7f0000001040)=[0xbe99, 0x2, 0x3, 0xaa, 0x6], &(0x7f0000001080)=[0x10, 0xfeaf], &(0x7f00000010c0)=[0x6, 0x5c, 0x0, 0x40, 0x9, 0x8, 0x3], &(0x7f0000001100)=[0x8, 0x0, 0x6, 0xf]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001240)={'ip_vti0\x00', &(0x7f0000001180)={'syztnl1\x00', 0x0, 0x10, 0x20, 0x8, 0x4, {{0x27, 0x4, 0x1, 0x9, 0x9c, 0x65, 0x0, 0x3, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x19}, {[@end, @end, @timestamp={0x44, 0xc, 0xc8, 0x0, 0x9, [0x4, 0xffffff6e]}, @timestamp={0x44, 0x18, 0x80, 0x0, 0xd, [0x97f, 0x6, 0x3, 0x4, 0x1]}, @lsrr={0x83, 0x1b, 0xb3, [@dev={0xac, 0x14, 0x14, 0x14}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x33}, @empty, @rand_addr=0x64010101, @multicast2]}, @rr={0x7, 0x7, 0x10, [@rand_addr=0x64010102]}, @ssrr={0x89, 0x1b, 0xdf, [@private=0xa010101, @rand_addr=0x64010100, @rand_addr=0x64010101, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}, @loopback]}, @lsrr={0x83, 0x23, 0xab, [@multicast1, @local, @multicast1, @local, @multicast1, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x19}, @multicast1]}]}}}}}) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001280)={r0, r1, 0x25, 0x2, @void}, 0x10) r3 = syz_open_dev$evdev(&(0x7f00000012c0), 0x7, 0xe000) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000001300)={0x0, 0x0, 0xcf, 0x8, 0x5}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000001980)={0x3ff, 0x0, &(0x7f0000001880)=[{&(0x7f0000001340)=""/234, 0xea}, {&(0x7f0000001440)=""/59, 0x3b}, {&(0x7f0000001480)=""/140, 0x8c}, {&(0x7f0000001540)=""/37, 0x25}, {&(0x7f0000001580)=""/255, 0xff}, {&(0x7f0000001680)=""/184, 0xb8}, {&(0x7f0000001740)=""/49, 0x31}, {&(0x7f0000001780)=""/29, 0x1d}, {&(0x7f00000017c0)=""/171, 0xab}], &(0x7f0000001940)=[0x15f3, 0xffff], 0x9}, 0x20) mount(&(0x7f00000019c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40)='jfs\x00', 0x800000, &(0x7f0000001a80)='syztnl1\x00') getsockname$tipc(r0, &(0x7f0000001ac0)=@name, &(0x7f0000001b00)=0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b80), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x3c, r4, 0x504, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x10000}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0xbf7}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x80, 0x1405, 0x800, 0x70bd28, 0x25dfdbfd, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40801}, 0x8084) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000001dc0)={0x1, 0x1}, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001fc0)={0x1, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001e00)=""/86, 0x56}, {&(0x7f0000001e80)=""/139, 0x8b}], &(0x7f0000001f80)=[0xffffffffffff5017, 0x3, 0x401], 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003200)={r0, 0x0, 0xfd, 0x1000, &(0x7f0000002000)="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", &(0x7f0000002100)=""/4096, 0x0, 0x0, 0xa1, 0x20, &(0x7f0000003100)="b6263fdd175e3eb43a81d4fbbc0b61b1eaa4f404625c9bd051f34e8347c5b4305eedf3b5337e21b01168b964cd9a23e8a3cadb4fd57476b4db83bd2000fa0d3548ca5e5abc32e262aa4f7ef3ac8d942337d0eb21ab898dfb927dd913bb3cbdac129a483a2822231e485071cc651aacb553bb25529d074e9a4e100a46fc5ea1124a8e81012d9bcfbeeb1f6ba710e0801e8c5e7935411680a1eef8c380ccace77054", &(0x7f00000031c0)="e547c219d19725de8940cf82f70120085f8679534dcf1af917635d7d081bc62f", 0x0, 0x0, 0x3}, 0x50) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000003340)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x4000008}, 0xc, &(0x7f0000003300)={&(0x7f00000032c0)={0x2c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r0}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x48d0) connect$inet6(r0, &(0x7f0000003380)={0xa, 0x4e22, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000033c0)={r0, r1, 0x25, 0x6, @void}, 0x10) r5 = accept4(r0, &(0x7f0000003400)=@ethernet={0x0, @dev}, &(0x7f0000003480)=0x80, 0x80000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000003500), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f00000035c0)={&(0x7f00000034c0), 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x24, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040804) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000037c0)={0x7468, 0x0, &(0x7f0000003740)=[{&(0x7f0000003600)=""/9, 0x9}, {&(0x7f0000003640)=""/17, 0x11}, {&(0x7f0000003680)=""/157, 0x9d}], &(0x7f0000003780)=[0x7fff, 0x2, 0x4], 0x3}, 0x20) execveat(r0, &(0x7f0000003800)='./file0\x00', 0x0, &(0x7f0000003a40)={[&(0x7f0000003840)='\x00', &(0x7f0000003880)='\x00', &(0x7f00000038c0)='ethtool\x00', &(0x7f0000003900)='\x00', &(0x7f0000003940)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', &(0x7f0000003980)='batadv\x00', &(0x7f00000039c0)='(--\x00', &(0x7f0000003a00)='/dev/input/event#\x00']}, 0x400) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000003ac0)={0x4, 0xfff}) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000003b00)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) unshare(0x0) socket$inet(0x2, 0x1, 0x7) executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101341) ioctl$USBDEVFS_IOCTL(r0, 0x80045515, 0x0) read$usbfs(r0, &(0x7f00000000c0)=""/39, 0x27) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061114c00000000008500000063522a035f00000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000100)=""/210, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xff000000, 0xffffffff, 'ipvlan0\x00', 'macsec0\x00', {}, {}, 0x67, 0x1, 0x40}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "bca95b91b2e840f98aafc5c24660edbb4e1d42a5b55184a18eeacfeed053"}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0xc2, {0x8}}}}, {{@ip={@multicast2, @multicast2, 0xff, 0xff000000, 'syz_tun\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x6, 0x3, 0x2}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000520004022abd7000fedbdf250a0800030009000000080006008000000008000100", @ANYRES32, @ANYBLOB="0e00020001040000000000"], 0x34}, 0x1, 0x0, 0x0, 0x42}, 0x40000000) write$binfmt_register(0xffffffffffffffff, &(0x7f00000006c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010065bd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="24002d8005000100030000000500040000000000080002"], 0x40}, 0x1, 0x0, 0x0, 0x24880}, 0x4000880) r5 = socket(0xf, 0x3, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000840)='net/udp6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000240)=0x85) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000600)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) mmap(&(0x7f0000611000/0x1000)=nil, 0x1000, 0x0, 0x20010, r1, 0xdefd6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000002dc0)=[{{&(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000940)="4422a2c520246020462a98869f259892bb60171f1b5035e2ebba27e3e8eac12ceead23b523c5e7b99951c6d34399f2692db3f2742a954a33261c059b41fe29dbb0f57483d0fb0597f805f80e83320bbb14058c08d67be1ab18006301ff2f21435fb1ea0357903e9a5e9eb559c02eb68f74dc78e59eb05720647290", 0x7b}, {&(0x7f0000000a00)="320202faa944b8a4b4b48b88842c9fed5ad54f7bc08d22c69f0034a1a378c7ce27a37be8f398443861f73e0f0d601159251728567aa672b9250b5cf39646e0fe7aa50ea58bb888d45c44a10f13f0e833f6bac78cc7f50630afe01eb59e8d95f5d1d94eec96fc3cf0e6efa44a98f0e7ce01a326e5bc00d5c8df70229de05a9e94b3ce913ec52c15e47d426b2374d7a258c763428ee8fff252885cae6546002d8fe16ef0c4358b5c961944", 0xaa}, {&(0x7f0000000ac0)="e8130e6b82e3370b01f6f1bfc144cfa3df0dd97095fb96b991ceafca9d", 0x1d}], 0x3, 0x0, 0x0, 0x4}}, {{&(0x7f0000000b40)=@file={0x0, './cgroup.cpu/cpuset.cpus/file0\x00'}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000bc0)="59c686f88a7bead12747cee70e7116ca4d4fd5007b96bad9e65c33fb9e8b6790e4d68382d74505ca046ea87e068a92c856c278dafec6379487a2d8f30de3fd0636d422b4e4be7076e0b9484aea3e4e742ab8557f2b736eb06e26d096ce783d5d0d3cc4f312a39b168e7cb08c1c0485ae955f66bfb60e43f50d3815da274310571c3016783b1605ef5fac328dc8ddab3db62c7fa7e541826ae42af57349cfed158717e684c162838b11e2d383df3ba3cbe0980410b4b11f5ef92b", 0xba}, {&(0x7f0000000c80)="2dfbd99d2030c84b6a75bffaa6b661e7f2fe6fec204967bdb30728d5df011e80e626c5ec45927abfeb17c6f92a2595e8adb5f0a24a1f40b95b56eed42abd01885f217c400fef94280cef5ac44202610cd9063fa41a1c15614d9ef840bd0166c02027b5f73bfdf8b59f5ca2937faef9cfe2255af9ba7076f701da50fd2b8bae1a4889bca407b7ec5dcfc13c2c80a8", 0x8e}, {&(0x7f0000000d40)="1608c14ad9aebdbb395221f9b9ac4cea6d70b7896a40838303ac4bcdc486ef8fa7f3ed81193dd9b053f336f2ee400a55aeb8b0975910046fb3f7a999c09a07c7316a2c6babd7065ddda4ef934dd6058facd2e0311573402979e461223a03d45b29132cb06d602b341ba9966dd669c9bf391d71ee3e8fc83d867ba29b3a3a0a7761f29365acf8be519b249f185b55ee7de8", 0x91}, {&(0x7f0000000e00)="0de063faa3ee177929990e67b52868132b4e7a94b3f6371bc706ef874169be3389e56cce40d4313f4e32d82ab8e8df839ed8941b5e77b673a74862", 0x3b}], 0x4, &(0x7f0000000f00)=[@rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30, 0x4004000}}, {{&(0x7f0000000f40)=@file={0x1, './cgroup.cpu/cpuset.cpus/file0\x00'}, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000001a40)="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", 0x1000}], 0x1, &(0x7f0000002b00)=[@rights={{0x28, 0x1, 0x1, [r9, 0xffffffffffffffff, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r9, r9]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}], 0x60, 0x4008001}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002b80)="82a3b1ff73de72210a1101d32c6828a09c1e621096c8f983ebde0a6e89fb9d88fa0563007336c0a46582a1af88c181dfd3f5c22f475b613d65f15db3ecf341446b2d77a14c48d205ff8e792b23813e33ddfe185db1493c069c40e29e03fe18ea24f611fbef4e861a62ad51e5ed9a9c482a067ba008657c9a6b1fb8130a9cb638efb106e88971974d2d2595b587265c770b594e908a0806c1cbc0c1eb5d7401abe8cedb5e9a8fbcab73752212b1135c5fa7834c12bb535c9a6258bbc0d9991ffd6693493711f6a6b3eba4ad1216812de29095", 0xd2}, {&(0x7f0000002c80)="d053918b30a6cb65f7150fc28e3020413b1c428300aa8d161649f4537762f21bd523eb0d25131cc156a8905d463da525592cb3b9a1721e030c0630c3b3ca77e2257fc71a18bd3473cf2f227ba738fbdf1dae27acb6c5d8b499cc6f8ed01c4f01a6b78de6171ca348ff95d813c8cf6306064d0a5760fedb6c21a41eabbd1c3c565218814ed336b239b550905e093aff1d7a83e8f560b30bc2a751a81ac5cb298f9a22fca4aa82ecbca181302c8615628c22378809407141d733f6111486c5aabd46c3ce15bc6ca1810d24689021e7ea398a84d0927e2fd2109b7f6e22", 0xdc}], 0x2, 0x0, 0x0, 0x80}}], 0x4, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r10 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000540)="74202623f7fa74b7c7a1e61d6bbda8148fa322003e0e9e40ccec8da33a55962c647cae1cd27779e8f9a8fd92cf1305339fa8edc8da25cf1217fc520d0839ca398677b7ac299d2c95514beab515970fbf99df234fd36337cd812cc056330a23fa9c535b25af4cd40302082a4f53c257d102795332fe9f4727af6ff4b8238a92cde02d75dd72ff353714f74f5ed221", 0x8e, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r10, r10, r10}, &(0x7f00000000c0)=""/61, 0xfffffffffffffd7e, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r6, &(0x7f0000000040)={0xa0000012}) lsetxattr$system_posix_acl(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000bb9ba80ef1a26696478103853dbef7d1585f2a9203395d9f1a0fd75fd1a14107cc67a72a06438ec858069a9096ff2adc525ffaed7252362c0b03000000000035ddd6921c34", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB="10000000000000002000000000000000"], 0x3c, 0x0) executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xbe, &(0x7f0000000600)=""/190, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0x6, &(0x7f0000000180)={0x8, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)="b405426ea90c9dd15e8d6b355ba051445771151690b436201407e508117aca0e9a8b988458de96b43682c6c2f024aa871b130be21d3587d35de825956e5ca79a4a7c4e159e7dfba036cb993e4bf1b566eba433b6eb0262b872aee78af21be91cdfcd0a86456b399efa2ba0c35ac5cfb98a884693387bbdac145928b3c6cd38a1234f41363789b44b6799595894e2ee99b505f4f9", &(0x7f00000003c0)="140dbc1289210e3ca292eb589285134b909e9b82f71c748fca26876a6758ad5ad3d35a00390dfe82047a565842959bb7cd2acb9f56f724740353003f16b64905c2fb78f8466544f3ff67955a5494d053104443add5bf8397090c67a4c69a5d31fa770576f630fcda64a9547d4fc8ddf0d2188accf1f51832b838046a0886c2a3e40c5565521301f68aba3d89602997d78a510875b0b03b8afde573d9f70e4170ccafb589d577786cd719e768b733d48cbc2b6043b5a106f697568b6cc53dea", 0x5}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000006c0)="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", 0x100}], 0x1}, 0x0) unshare(0x28000600) clock_settime(0x1ed5d7403, &(0x7f00000000c0)) r6 = fsopen(&(0x7f00000001c0)='hpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x8e) unshare(0x4c040480) mknodat$loop(r7, &(0x7f0000000140)='./file0\x00', 0x4, 0x1) r8 = io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x10420, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r8, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) socket$nl_generic(0x10, 0x3, 0x10) executing program 6: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=@encrypted_new={'new ', 'default', 0x20, 'user:', '-\\}', 0x20, 0x9}, 0x2a, r0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x4002) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x84) r2 = syz_usb_connect$uac1(0x0, 0xe1, &(0x7f0000000140)={{0x12, 0x1, 0x311, 0x0, 0x0, 0x0, 0x20, 0x763, 0x1031, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcf, 0x3, 0x1, 0x2, 0x0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x33}, [@extension_unit={0xd, 0x24, 0x8, 0x2, 0x9, 0x2, "722a6563e097"}, @extension_unit={0xb, 0x24, 0x8, 0x4, 0x5, 0xbe, "b8661f08"}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x0, "0d4616e019e5"}, @selector_unit={0x6, 0x24, 0x5, 0x2, 0x3, 'e'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x6, 0x9, 0x7, "655375d3"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x4, 0x3, 0xf}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xb8, 0x4, 0x8, 0x2}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x81, 0x3, 0x5, 0x1, "cf"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0xc, 0x6, {0x7, 0x25, 0x1, 0xc, 0x7a, 0x101}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x4, 0x4, 0x8, 'N'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x0, 0x1, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xf, 0x400, 0x0, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x68, 0xff, 0x20, {0x7, 0x25, 0x1, 0x4, 0xb4, 0x7a9d}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x5, 0x3, 0x5, 0x20, 0x3}, 0x33, &(0x7f0000000280)={0x5, 0xf, 0x33, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x1, 0xf0f, 0x19, [0xc030, 0xff3e48, 0xc000, 0x47e35457c95de317, 0x82eb28b482bc1a0d, 0x1e]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x4, 0x13}]}, 0x5, [{0x5a, &(0x7f00000002c0)=@string={0x5a, 0x3, "1687ba907dcf811dd9a43a91f774cc78b812c5ca238092f5033c98674a06be6ad7909684bb63a0342a1c215e9f5daa4aae77be5c5d23a71e1d9745026771c0ccdaecee2d982afe8c690f2864f9eff65004f9aaa55c674589"}}, {0xb1, &(0x7f0000000340)=@string={0xb1, 0x3, "b6f97a47666b2a37760202c9f72200e7996316490d7af48fbe681c5cce7042f4f26c3550a2889452b57a38aacb785170138f026acf31d3e8ccb7e3d0a0173dbe45e2363863436cd3d4741ad6be87e54f738f4c158f50c9471cbcbe51d96b76cad602424efb70101ac7f11d0869c0f85ee5ca3ebb0f7420286302f0da6728ee0e47808ff3cbdd28e4228c5064206ea7374810c39080b65edbd14e83eedeed857661859c0dd7637c65221b4e41be7350"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x41a}}]}) syz_usb_control_io$uac1(r2, &(0x7f00000005c0)={0x14, &(0x7f0000000540)={0x20, 0x6, 0x3a, {0x3a, 0x23, "dd5c706baf4a6cbb7d857335c4508c574eed0da6303b460cfcc06578643328aeae701f19e1c3e1238055c120f9c607017262a3b45aa6640d"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000600)={0x20, 0x14, 0xed, "2b57b36c263551c9b9c9181bc329d2f77875eb0eb58c63af3cffde0ca22f6ef21527dacfa8b9755c71fa7e1bcb7ccd3cf11e9d893ae71fb3ce49c9e93df6ac27c24b76db8e3335d2f762a68b354d29c4b49cb81b4f910be5f1febc8b783abc76e75bc0d70f0967e8181cccdb742b9cf6cad61fa91fa5d7d9923cdad0a695d9842bbcb6f044e0129dd769381ab47a195e6f0f43581578c325c7d7b9fe4075e46f2e20366201f19e4ae349664ce2e12339c5602a5e78d8b8ef82840b7834e6d40f3007f16b9d3c0d3125c1dfe1619e0610ece610917dee88834f482267a6b662437a98656d8eb990e136a19c535f"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000780)={0x20, 0x81, 0x1, 'K'}, &(0x7f00000007c0)={0x20, 0x82, 0x1, "f0"}, &(0x7f0000000800)={0x20, 0x83, 0x2, '/['}, &(0x7f0000000840)={0x20, 0x84, 0x2, '6P'}, &(0x7f0000000880)={0x20, 0x85, 0x3, "83e09c"}}) syz_usb_connect$cdc_ncm(0x5, 0xa2, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x2, 0x1, 0x0, 0x110, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "10403362"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xfffffffd, 0x4, 0x80, 0x8}, {0x6, 0x24, 0x1a, 0x40}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0xd, 0x1, 0x4}, @mdlm={0x15, 0x24, 0x12, 0xd1}, @country_functional={0xa, 0x24, 0x7, 0x9, 0xe3, [0x3, 0x6cb3]}, @obex={0x5, 0x24, 0x15, 0x793}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0x40, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0xf7, 0x3a}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x1, 0x9, 0x5, 0x2, 0x8, 0xfc}, 0x2e, &(0x7f0000000a40)={0x5, 0xf, 0x2e, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0xa0, 0x0, 0x3, 0x1, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x0, 0x1, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x55, "1c95e2fc7e339339726b045b6786343f"}]}, 0x3, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x500a}}]}) r3 = msgget(0x0, 0x54) msgsnd(r3, &(0x7f0000000b80)={0x1, "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"}, 0x1008, 0x0) write(r1, &(0x7f0000001bc0)="cc13db4ad44f48673bc425b2f50e053f1b0233fd3dd45f90d2a03052e7434ba530a226dd55156c53acc81ac35bf885841babfff8f8e30db0c37d19f839f68a128b41bbf0f210714a48327c357740addac92c3550dd1c6953572a9bd99cf838d3b120ac425cd9b8d71432bf23", 0x6c) syz_create_resource$binfmt(&(0x7f0000001c40)='./file0\x00') msgctl$IPC_STAT(r3, 0x2, &(0x7f0000001c80)=""/180) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000001d40)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = syz_open_dev$ublk_chdev(&(0x7f0000002080), 0x0, 0x600) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000001d80)={0x0, 0x5e32, 0x200, 0x3, 0x287, 0x0, r1}, &(0x7f0000001e00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x294d, 0x4000, 0x2, 0x16a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x295c, 0x8000, 0x3, 0x262, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8ca8, 0x0, 0x0, 0x1d9, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7393, 0x80000, 0x3, 0x2bd, 0x0, r1}}], 0x4, &(0x7f00000030c0)={0x2e, 0x2, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x5}, 0x0, r7, '\x00', {0x3, 0x59d, 0x0, &(0x7f00000020c0)=@buf_1k="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"}}, &(0x7f0000003140)) msgctl$IPC_RMID(r3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000042c0)={0x4, 0x4, &(0x7f0000003180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7}, [@alu={0x7, 0x0, 0xd, 0x2, 0x2, 0xffffffffffffffde, 0x10}]}, &(0x7f00000031c0)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000003200)=""/4096, 0x41100, 0x8, '\x00', 0x0, @fallback=0x37, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0xa, 0x0, &(0x7f0000004200)=[{0x3, 0x2, 0x7, 0x4}, {0x3, 0x2, 0x1, 0xc}, {0x5, 0x3, 0x7, 0x5}, {0x5, 0x5, 0x3}, {0x0, 0x3, 0x10, 0x3}, {0x3, 0x3, 0xc}, {0x1, 0x3, 0x5, 0x9}, {0x0, 0x1, 0x4, 0x6}, {0x1, 0x4, 0xb, 0x9}, {0x5, 0x3, 0xe, 0x1}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004580)={r8, 0x0, 0xf, 0x4b, &(0x7f0000004380)="1b9d573a420ac8296b16d8751d94db", &(0x7f00000043c0)=""/75, 0x3, 0x0, 0xe3, 0x37, &(0x7f0000004440)="ecbcab84bc4092a81dbd144e80e90fd4001b3f90a6ec425b952bb9bf86028b4a274476214289e663aa167f7164e4958a044d9cfedeacdad564d4af2d4642ac76d434bb937f01aca76e3f4eca65e1589d24c1c243ec47001dc66f5e0b716f99889613f393d3422d327779d260114388eb3b8bb76ae8f3e78ad499599f66f1cf90744009f9f9e1b55124fe33c15c20fbf1a7d83c93881c85b8a3731fb4dd5cc765e56a7702199353015395fb0e41c5c13d064adc5ce8a093bcf8342e7a4a4ed2170225559d909b5074c04cb3db5f5fd8fc98d4c08b2268ccefadd448a138a539255f03d1", &(0x7f0000004540)="e9f111dfd526f197904b0bbf56a8cd9060ce1dbd89b05b49af733254209fdad231c2f24ad828032deadfd038117f5a988c27016e99d897", 0x4, 0x0, 0x5}, 0x50) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000004780)={0x0, 0x1, 0x0, &(0x7f0000004600)=[{}], 0x1, 0x0, &(0x7f0000004680)=[{}], 0x1, 0x0, &(0x7f0000004700)=[{}], 0x1, 0x0, &(0x7f0000004740)=[{}]}) read$FUSE(r1, &(0x7f0000004800)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000008880)=0x0) r12 = fcntl$getown(r6, 0x9) msgctl$IPC_SET(r3, 0x1, &(0x7f00000088c0)={{0x0, r9, 0xee00, r10, 0xee01, 0xc, 0x9877}, 0x0, 0x0, 0xf, 0x8, 0x40, 0x7, 0x100, 0xfdb4, 0xfff9, 0x5, r11, r12}) ioctl$KDMKTONE(r5, 0x4b30, 0x3ff) sched_setscheduler(r11, 0x3, &(0x7f0000008940)=0x1ff) socket(0x1a, 0x2, 0x9) sendmsg$nl_xfrm(r1, &(0x7f0000008b80)={&(0x7f0000008980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000008b40)={&(0x7f00000089c0)=@delsa={0x158, 0x11, 0x794, 0x70bd2b, 0x25dfdbfc, {@in6=@private2, 0x4d6, 0xa, 0x32}, [@algo_aead={0x6e, 0x12, {{'aegis128-generic\x00'}, 0x110, 0x120, "bae4f67d3317f10c0b0532f1b4903e2ca9c9b11bef9dab63d501b3215b432b48ee16"}}, @srcaddr={0x14, 0xd, @in6=@mcast1}, @replay_val={0x10, 0xa, {0x70bd29, 0x70bd26, 0xffff}}, @algo_crypt={0x9b, 0x2, {{'ecb-serpent-avx\x00'}, 0x298, "d45d2583ed992055d563dd5462e17a4b644e25a16aaa715818e65edd900d599cd4917fc49ffafb41cae37e26830a5344e2c82a426af75c7f4809d2481a67ef560c04b06b13970ac84d3b4eb4dff80caba5f988"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20008000}, 0xd840) executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@remote, @private0={0xfc, 0x0, '\x00', 0xff}, @empty, 0x9, 0x40, 0x0, 0x100, 0x0, 0xd0010b}) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x331020, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025647a31000000000900010073797a3000000000080005400000001c"], 0xe0}, 0x1, 0x0, 0x0, 0x4081}, 0x0) (async) ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, &(0x7f0000000040)) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) (rerun: 64) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/config.gz\x00', 0x0, 0x0) read$eventfd(r5, &(0x7f00000002c0), 0x8) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000300)={[{@abort}, {@acl}, {@oldalloc}, {@jqfmt_vfsv0}]}, 0x1, 0x5cb, &(0x7f0000000600)="$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") ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r9) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r10, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}]}, 0x3c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYRESDEC=r8, @ANYRES16=r7], 0x1c}}, 0x840) (async) write$nci(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="7105"], 0x148) executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/681], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2000}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xeff, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b9", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 5: r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0x8, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000008000000000000000000000000211df385", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)=r3}, 0x20) close(0x3) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0x7, 0x80000, r2}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x40, 0x700, 0x8, 0xe, {{0x3b, 0x4, 0x1, 0x6, 0xec, 0x64, 0x0, 0x1, 0x4, 0x0, @multicast2, @private=0xa010100, {[@ssrr={0x89, 0x13, 0x6f, [@loopback, @multicast1, @empty, @remote]}, @timestamp_addr={0x44, 0x4c, 0xc6, 0x1, 0x1, [{@multicast2, 0x8}, {@rand_addr=0x64010101, 0x3ff}, {@local, 0x351}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@loopback, 0x800}, {@local, 0x2}, {@multicast2, 0x2}, {@multicast2, 0xf}, {@rand_addr=0x64010102, 0x4}]}, @end, @timestamp={0x44, 0xc, 0xfd, 0x0, 0xa, [0x5, 0x80]}, @ssrr={0x89, 0xb, 0xe6, [@local, @loopback]}, @cipso={0x86, 0x5e, 0x0, [{0x5, 0x7, "cb9335514d"}, {0x2, 0xf, "d27f80cc8fbd4379d0d8777ee9"}, {0x0, 0x12, "3d944e32bb85e318f24edcd7adcf3b99"}, {0x7, 0x9, "d8666ca42e37b6"}, {0x7, 0xb, "99ff39926e420567b8"}, {0x5, 0xb, "cf343a1def1b6902c5"}, {0x0, 0x11, "f43ca8ac9c3d2de0bacf8378405ae3"}]}]}}}}}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000004800)={0x2020}, 0x2020) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x12, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xd70}, [@exit, @generic={0x2, 0x1, 0x5, 0x0, 0x3}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xe}]}, &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x10, '\x00', r5, @fallback=0x2d, r6, 0x8, &(0x7f0000000400)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x9, &(0x7f0000000480)=[r2, 0x1, r4, r2, r4, r4, r4, r4], &(0x7f00000005c0)=[{0x3, 0x5, 0x1, 0xb}, {0x2, 0x2, 0x1, 0x4}, {0x5, 0x3, 0xc, 0x2}, {0x1, 0x1, 0xe, 0x8}, {0x3, 0x4, 0xb, 0xc}, {0x1, 0x3, 0xe, 0x3}, {0x1, 0x4, 0x10}, {0x5, 0x3, 0x0, 0xc}, {0x2, 0x8000001, 0x7, 0x9}], 0x10, 0x200}, 0x94) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r8, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r9, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000100)=@nullb, r4, &(0x7f0000000280)={0x6, 0x6, 0x1}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") io_setup(0x6, 0x0) pipe2(&(0x7f0000000180), 0x80000) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x20, '\x00', 0x0, @cgroup_skb}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)="2a3a206782", 0x5) add_key(0x0, 0x0, &(0x7f0000000780), 0x0, 0xfffffffffffffffa) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000880), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) executing program 5: mbind(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x8, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000fff000/0x1000)=nil) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) brk(0x20ffc004) executing program 6: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x23}, [@ldst={0x1, 0x0, 0x1, 0x1, 0x1, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f}, 0x94) executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_getnexthop={0x34, 0x6a, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}]}, 0x34}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x6, &(0x7f00000000c0)={0x90, {{0x29, 0x0, 0x3e000000, @mcast1}}, {{0xa, 0x4e20, 0xfffffffe, @remote, 0x6}}}, 0x108) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) ioctl$IOC_PR_RELEASE(r4, 0x401070ca, &(0x7f0000000040)={0x4, 0x7, 0x1}) writev(r1, &(0x7f0000000480), 0x0) executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r5], 0x48}}, 0x0) executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xfffffee2) r5 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000480)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) splice(r0, 0x0, r3, 0x0, 0x38f9, 0x0) splice(r2, 0x0, r1, 0x0, 0x7fffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) r7 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x9, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r7, 0x1, 0x1, 0x1, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r11, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000001fc0)=@ethtool_cmd={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2c, 0x0, 0xfffe}}) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_open_dev$vim2m(&(0x7f0000000000), 0x25, 0x2) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x28, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x16, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000087000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003a00"}]}}]}, 0x170}}, 0x0) executing program 6: syz_emit_ethernet(0xfc0, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xf8a, 0x11, 0x0, @private2, @mcast2, {[@srh={0x62, 0x0, 0x4, 0x0, 0x3, 0x0, 0x8}], {0x4e21, 0xe22, 0xf82, 0x0, @gue={{0x1, 0x0, 0x2, 0x9, 0x100, @void}, "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"}}}}}}}, 0x0) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000090c0000af9b0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028006001900040000000500010004000000"], 0x44}}, 0x0) executing program 6: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) (async) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000200)='./file0\x00', 0x81, &(0x7f0000000500)=ANY=[], 0xfa, 0x2c0, &(0x7f0000000480)="$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") (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) getdents64(r1, &(0x7f0000000000)=""/134, 0x86) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r3 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x6000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x1}) (async) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) (async) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fcntl$setsig(r7, 0x3, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000140)=0x81) (async) r8 = dup(r2) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x1c3040, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r11, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="f8ffffff0000000000000000070000000000000099dc50b4797f297303a15482b6231e110858b5b35c3c043552145248e16ebd3ed2e6640230b615d93e76db1014a5af97edf7fcdea7ed52d49aaab0da98a80a0d544bc778e518dfcc63e00f4b8d998bcb010b46130ea1fcdf45e7a1d34d0aec059163c906499f7010bf393578db4cb4ab8022ae5a8f6775eb3b7416b33d8e79e2c15473e17e0cccbfb17fee9dc37e9a8475aa005527f303485d7c4fe71b0b3668", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000500"/28], 0xc) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x1, 0x2, 0x81, 0x0, 0x7, 0x0}) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000040)=0x3641) (async) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0xfffffffffffffe27}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000180)=0x1, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xfff2, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x804, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x284, &(0x7f0000001d00)="$eJzs3c9qM1UUAPAzyaRJdJEsXInwDejC1UfrE7RIBbEgKFmoCy02BWlCoYVAVYxd+QQ+gc/jRnwBH0BxZxfiSDqTNKmTaGvaFP39Nrmce07umT9JVnPzySvDk6PT8+PLL3+KViuJ2m7sxlUS3ajF1NdR6cdfquMAwBN3lefxa15oFqGLxYzGksq09uDNAQAPYv73f9O9AACP4/0PPnxn7+Bg/70sa0UMvxn1kihei/m94/gsBtGP7ejE7xH5TDF+6+2D/UiziW68NhyPepPK4cffl++/93PEdf1OdKJbXb+TFebqx6NeI14o198dRP/d76ITL1XXv1FRH7WteP3Vuf6fRyd++DROYxBHZW/T+q92suzN/NvfvvhoEp3UJ+NRrznLK7Prj3phAAAAAAAAAAAAAAAAAAAAAAD4T3uezXQX99+Zbvy/Yn7F/kDjuf15trMsy5Mi/6Y+jZfTSDd57AAAAAAAAAAAAAAAAAAAAPBUnF98fnI4GPTP1jqYPtZfMRV/LEaaEXH/tZ798+Sin6iXrQ2SiLut1YjmdeXfJ9f/GilXra5qT/rpnyVprO8SJLNIe37qWRRrTSLtYjAX+dert+J6ML27Tg6T6NdWnrFW1U2yhkFecfvVl1Zt3Y60yyOoSG6vWH3rxXv1nHeWTCUR0ZidzMWc9NZHuLHec/jgXz0AAAAAAAAAAAAAAAAAAMAtNw/9VkxebqAhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANiAm///v8NgXBYvy8nrk0EaZWTDhwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/wJ8BAAD//2BEXgA=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_genetlink_get_family_id$team(&(0x7f0000000140), r4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000b00)={'syztnl0\x00', r3, 0x1, 0x80, 0x6, 0xff, {{0x1f, 0x4, 0x1, 0x7, 0x7c, 0x64, 0x0, 0xa, 0x29, 0x0, @private=0xa010100, @broadcast, {[@timestamp_addr={0x44, 0x4, 0x5b, 0x1, 0x1}, @ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0x14, 0xd8, 0x1, 0x9, [{@multicast1, 0x10001}, {@local, 0x7}]}, @generic={0x86, 0x9, "cbbff81d041802"}, @timestamp_prespec={0x44, 0x34, 0xcd, 0x3, 0x8, [{@loopback, 0xd773}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xeb7}, {@loopback, 0x40}, {@rand_addr=0x64010101, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x1}]}, @lsrr={0x83, 0xb, 0x7f, [@loopback, @multicast2]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000004c0)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000580)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000003c0)={'sit0\x00', &(0x7f00000005c0)={'gre0\x00', r3, 0x8, 0x10, 0xfffffc00, 0x7, {{0x1d, 0x4, 0x3, 0x8, 0x74, 0x66, 0x0, 0xee, 0x29, 0x0, @empty, @local, {[@timestamp_prespec={0x44, 0x14, 0xb8, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@multicast1, 0x81}]}, @cipso={0x86, 0x3d, 0x3, [{0x6, 0x2}, {0x0, 0x8, "40016cf6cac8"}, {0x1, 0xd, "3c1bbc880beccb130515bc"}, {0x5, 0xa, "219329936e61bc6c"}, {0x7, 0x5, "6c551e"}, {0x5, 0x11, "62d44028d7704e182e788b3534c1f4"}]}, @lsrr={0x83, 0xf, 0x24, [@loopback, @rand_addr=0x64010101, @loopback]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'ip6tnl0\x00', r3, 0x29, 0x2, 0x1, 0x7ff, 0x42, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x700, 0x81, 0x3}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140044a60000100001000000005f000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000008327020900020873797a31005fd7870300000008000a40fff7fffc400000000c0a01010000000000001f000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001000000000000000000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4044044) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a000001894426b82af0e2e5bd2f52b0037eb00900020073797a3100"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x4008880) close(r5) recvfrom(r6, 0x0, 0x0, 0x40002062, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'ip6_vti0\x00', r3, 0x29, 0x8, 0x2, 0x3, 0x40, @private1, @loopback, 0x8, 0x8, 0x93, 0x8}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r8, @ANYBLOB="000a000000000000180012800e000100697036677265746170000000040002801c001a"], 0x54}}, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30, 30, 23, 5, 22, 29, 8, 1, 2, 12, 16, 30, 3, 23, 30, 30] detailed listing: executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xff000000, 0xffffffff, 'ipvlan0\x00', 'macsec0\x00', {}, {}, 0x67, 0x1, 0x40}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "bca95b91b2e840f98aafc5c24660edbb4e1d42a5b55184a18eeacfeed053"}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0xc2, {0x8}}}}, {{@ip={@multicast2, @multicast2, 0xff, 0xff000000, 'syz_tun\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x6, 0x3, 0x2}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000520004022abd7000fedbdf250a0800030009000000080006008000000008000100", @ANYRES32, @ANYBLOB="0e00020001040000000000"], 0x34}, 0x1, 0x0, 0x0, 0x42}, 0x40000000) write$binfmt_register(0xffffffffffffffff, &(0x7f00000006c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010065bd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="24002d8005000100030000000500040000000000080002"], 0x40}, 0x1, 0x0, 0x0, 0x24880}, 0x4000880) r5 = socket(0xf, 0x3, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000840)='net/udp6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000240)=0x85) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000600)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) mmap(&(0x7f0000611000/0x1000)=nil, 0x1000, 0x0, 0x20010, r1, 0xdefd6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000002dc0)=[{{&(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000940)="4422a2c520246020462a98869f259892bb60171f1b5035e2ebba27e3e8eac12ceead23b523c5e7b99951c6d34399f2692db3f2742a954a33261c059b41fe29dbb0f57483d0fb0597f805f80e83320bbb14058c08d67be1ab18006301ff2f21435fb1ea0357903e9a5e9eb559c02eb68f74dc78e59eb05720647290", 0x7b}, {&(0x7f0000000a00)="320202faa944b8a4b4b48b88842c9fed5ad54f7bc08d22c69f0034a1a378c7ce27a37be8f398443861f73e0f0d601159251728567aa672b9250b5cf39646e0fe7aa50ea58bb888d45c44a10f13f0e833f6bac78cc7f50630afe01eb59e8d95f5d1d94eec96fc3cf0e6efa44a98f0e7ce01a326e5bc00d5c8df70229de05a9e94b3ce913ec52c15e47d426b2374d7a258c763428ee8fff252885cae6546002d8fe16ef0c4358b5c961944", 0xaa}, {&(0x7f0000000ac0)="e8130e6b82e3370b01f6f1bfc144cfa3df0dd97095fb96b991ceafca9d", 0x1d}], 0x3, 0x0, 0x0, 0x4}}, {{&(0x7f0000000b40)=@file={0x0, './cgroup.cpu/cpuset.cpus/file0\x00'}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000bc0)="59c686f88a7bead12747cee70e7116ca4d4fd5007b96bad9e65c33fb9e8b6790e4d68382d74505ca046ea87e068a92c856c278dafec6379487a2d8f30de3fd0636d422b4e4be7076e0b9484aea3e4e742ab8557f2b736eb06e26d096ce783d5d0d3cc4f312a39b168e7cb08c1c0485ae955f66bfb60e43f50d3815da274310571c3016783b1605ef5fac328dc8ddab3db62c7fa7e541826ae42af57349cfed158717e684c162838b11e2d383df3ba3cbe0980410b4b11f5ef92b", 0xba}, {&(0x7f0000000c80)="2dfbd99d2030c84b6a75bffaa6b661e7f2fe6fec204967bdb30728d5df011e80e626c5ec45927abfeb17c6f92a2595e8adb5f0a24a1f40b95b56eed42abd01885f217c400fef94280cef5ac44202610cd9063fa41a1c15614d9ef840bd0166c02027b5f73bfdf8b59f5ca2937faef9cfe2255af9ba7076f701da50fd2b8bae1a4889bca407b7ec5dcfc13c2c80a8", 0x8e}, {&(0x7f0000000d40)="1608c14ad9aebdbb395221f9b9ac4cea6d70b7896a40838303ac4bcdc486ef8fa7f3ed81193dd9b053f336f2ee400a55aeb8b0975910046fb3f7a999c09a07c7316a2c6babd7065ddda4ef934dd6058facd2e0311573402979e461223a03d45b29132cb06d602b341ba9966dd669c9bf391d71ee3e8fc83d867ba29b3a3a0a7761f29365acf8be519b249f185b55ee7de8", 0x91}, {&(0x7f0000000e00)="0de063faa3ee177929990e67b52868132b4e7a94b3f6371bc706ef874169be3389e56cce40d4313f4e32d82ab8e8df839ed8941b5e77b673a74862", 0x3b}], 0x4, &(0x7f0000000f00)=[@rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30, 0x4004000}}, {{&(0x7f0000000f40)=@file={0x1, './cgroup.cpu/cpuset.cpus/file0\x00'}, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000001a40)="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", 0x1000}], 0x1, &(0x7f0000002b00)=[@rights={{0x28, 0x1, 0x1, [r9, 0xffffffffffffffff, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r9, r9]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}], 0x60, 0x4008001}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002b80)="82a3b1ff73de72210a1101d32c6828a09c1e621096c8f983ebde0a6e89fb9d88fa0563007336c0a46582a1af88c181dfd3f5c22f475b613d65f15db3ecf341446b2d77a14c48d205ff8e792b23813e33ddfe185db1493c069c40e29e03fe18ea24f611fbef4e861a62ad51e5ed9a9c482a067ba008657c9a6b1fb8130a9cb638efb106e88971974d2d2595b587265c770b594e908a0806c1cbc0c1eb5d7401abe8cedb5e9a8fbcab73752212b1135c5fa7834c12bb535c9a6258bbc0d9991ffd6693493711f6a6b3eba4ad1216812de29095", 0xd2}, {&(0x7f0000002c80)="d053918b30a6cb65f7150fc28e3020413b1c428300aa8d161649f4537762f21bd523eb0d25131cc156a8905d463da525592cb3b9a1721e030c0630c3b3ca77e2257fc71a18bd3473cf2f227ba738fbdf1dae27acb6c5d8b499cc6f8ed01c4f01a6b78de6171ca348ff95d813c8cf6306064d0a5760fedb6c21a41eabbd1c3c565218814ed336b239b550905e093aff1d7a83e8f560b30bc2a751a81ac5cb298f9a22fca4aa82ecbca181302c8615628c22378809407141d733f6111486c5aabd46c3ce15bc6ca1810d24689021e7ea398a84d0927e2fd2109b7f6e22", 0xdc}], 0x2, 0x0, 0x0, 0x80}}], 0x4, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r10 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000540)="74202623f7fa74b7c7a1e61d6bbda8148fa322003e0e9e40ccec8da33a55962c647cae1cd27779e8f9a8fd92cf1305339fa8edc8da25cf1217fc520d0839ca398677b7ac299d2c95514beab515970fbf99df234fd36337cd812cc056330a23fa9c535b25af4cd40302082a4f53c257d102795332fe9f4727af6ff4b8238a92cde02d75dd72ff353714f74f5ed221", 0x8e, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r10, r10, r10}, &(0x7f00000000c0)=""/61, 0xfffffffffffffd7e, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r6, &(0x7f0000000040)={0xa0000012}) lsetxattr$system_posix_acl(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000bb9ba80ef1a26696478103853dbef7d1585f2a9203395d9f1a0fd75fd1a14107cc67a72a06438ec858069a9096ff2adc525ffaed7252362c0b03000000000035ddd6921c34", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB="10000000000000002000000000000000"], 0x3c, 0x0) executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xbe, &(0x7f0000000600)=""/190, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0x6, &(0x7f0000000180)={0x8, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)="b405426ea90c9dd15e8d6b355ba051445771151690b436201407e508117aca0e9a8b988458de96b43682c6c2f024aa871b130be21d3587d35de825956e5ca79a4a7c4e159e7dfba036cb993e4bf1b566eba433b6eb0262b872aee78af21be91cdfcd0a86456b399efa2ba0c35ac5cfb98a884693387bbdac145928b3c6cd38a1234f41363789b44b6799595894e2ee99b505f4f9", &(0x7f00000003c0)="140dbc1289210e3ca292eb589285134b909e9b82f71c748fca26876a6758ad5ad3d35a00390dfe82047a565842959bb7cd2acb9f56f724740353003f16b64905c2fb78f8466544f3ff67955a5494d053104443add5bf8397090c67a4c69a5d31fa770576f630fcda64a9547d4fc8ddf0d2188accf1f51832b838046a0886c2a3e40c5565521301f68aba3d89602997d78a510875b0b03b8afde573d9f70e4170ccafb589d577786cd719e768b733d48cbc2b6043b5a106f697568b6cc53dea", 0x5}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000006c0)="ac58851359f1078a45181d8bc4794e019e9d05b1cbe012d50334ae6edc8bf8144c884a094f99cd483d762ce27f0484d12aa57f69ea13659d4be855f66f1187e300ecaad366118ed863fc4d8da5f2000272850a4bc08e8048d50da41122029a81b49c23caf909943d9d0ead7b5042c23cda4d39c0c7b7e1b6055824947744807ecea32b6cfb57304ef90929d3c743fbcebf8d9e1e9f7fde5a2708e91e81a190499ec10879237a66d18581850d97790dcdc9ffb2ce3d010427aaf9ab211cf0247d7020887747f04841162901384aecaf28463d5459fd8d56ca7ab1e87b62a346988b2645bc07c50f159cd4c71174469fbbfed09e4ca4b01f7b874d595bb9f6df17", 0x100}], 0x1}, 0x0) unshare(0x28000600) clock_settime(0x1ed5d7403, &(0x7f00000000c0)) r6 = fsopen(&(0x7f00000001c0)='hpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x8e) unshare(0x4c040480) mknodat$loop(r7, &(0x7f0000000140)='./file0\x00', 0x4, 0x1) r8 = io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x10420, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r8, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) socket$nl_generic(0x10, 0x3, 0x10) executing program 6: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=@encrypted_new={'new ', 'default', 0x20, 'user:', '-\\}', 0x20, 0x9}, 0x2a, r0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x4002) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x84) r2 = syz_usb_connect$uac1(0x0, 0xe1, &(0x7f0000000140)={{0x12, 0x1, 0x311, 0x0, 0x0, 0x0, 0x20, 0x763, 0x1031, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcf, 0x3, 0x1, 0x2, 0x0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x33}, [@extension_unit={0xd, 0x24, 0x8, 0x2, 0x9, 0x2, "722a6563e097"}, @extension_unit={0xb, 0x24, 0x8, 0x4, 0x5, 0xbe, "b8661f08"}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x0, "0d4616e019e5"}, @selector_unit={0x6, 0x24, 0x5, 0x2, 0x3, 'e'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x6, 0x9, 0x7, "655375d3"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x4, 0x3, 0xf}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xb8, 0x4, 0x8, 0x2}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x81, 0x3, 0x5, 0x1, "cf"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0xc, 0x6, {0x7, 0x25, 0x1, 0xc, 0x7a, 0x101}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x4, 0x4, 0x8, 'N'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x0, 0x1, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xf, 0x400, 0x0, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x68, 0xff, 0x20, {0x7, 0x25, 0x1, 0x4, 0xb4, 0x7a9d}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x5, 0x3, 0x5, 0x20, 0x3}, 0x33, &(0x7f0000000280)={0x5, 0xf, 0x33, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x1, 0xf0f, 0x19, [0xc030, 0xff3e48, 0xc000, 0x47e35457c95de317, 0x82eb28b482bc1a0d, 0x1e]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x4, 0x13}]}, 0x5, [{0x5a, &(0x7f00000002c0)=@string={0x5a, 0x3, "1687ba907dcf811dd9a43a91f774cc78b812c5ca238092f5033c98674a06be6ad7909684bb63a0342a1c215e9f5daa4aae77be5c5d23a71e1d9745026771c0ccdaecee2d982afe8c690f2864f9eff65004f9aaa55c674589"}}, {0xb1, &(0x7f0000000340)=@string={0xb1, 0x3, "b6f97a47666b2a37760202c9f72200e7996316490d7af48fbe681c5cce7042f4f26c3550a2889452b57a38aacb785170138f026acf31d3e8ccb7e3d0a0173dbe45e2363863436cd3d4741ad6be87e54f738f4c158f50c9471cbcbe51d96b76cad602424efb70101ac7f11d0869c0f85ee5ca3ebb0f7420286302f0da6728ee0e47808ff3cbdd28e4228c5064206ea7374810c39080b65edbd14e83eedeed857661859c0dd7637c65221b4e41be7350"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x41a}}]}) syz_usb_control_io$uac1(r2, &(0x7f00000005c0)={0x14, &(0x7f0000000540)={0x20, 0x6, 0x3a, {0x3a, 0x23, "dd5c706baf4a6cbb7d857335c4508c574eed0da6303b460cfcc06578643328aeae701f19e1c3e1238055c120f9c607017262a3b45aa6640d"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000600)={0x20, 0x14, 0xed, "2b57b36c263551c9b9c9181bc329d2f77875eb0eb58c63af3cffde0ca22f6ef21527dacfa8b9755c71fa7e1bcb7ccd3cf11e9d893ae71fb3ce49c9e93df6ac27c24b76db8e3335d2f762a68b354d29c4b49cb81b4f910be5f1febc8b783abc76e75bc0d70f0967e8181cccdb742b9cf6cad61fa91fa5d7d9923cdad0a695d9842bbcb6f044e0129dd769381ab47a195e6f0f43581578c325c7d7b9fe4075e46f2e20366201f19e4ae349664ce2e12339c5602a5e78d8b8ef82840b7834e6d40f3007f16b9d3c0d3125c1dfe1619e0610ece610917dee88834f482267a6b662437a98656d8eb990e136a19c535f"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000780)={0x20, 0x81, 0x1, 'K'}, &(0x7f00000007c0)={0x20, 0x82, 0x1, "f0"}, &(0x7f0000000800)={0x20, 0x83, 0x2, '/['}, &(0x7f0000000840)={0x20, 0x84, 0x2, '6P'}, &(0x7f0000000880)={0x20, 0x85, 0x3, "83e09c"}}) syz_usb_connect$cdc_ncm(0x5, 0xa2, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x2, 0x1, 0x0, 0x110, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "10403362"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xfffffffd, 0x4, 0x80, 0x8}, {0x6, 0x24, 0x1a, 0x40}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0xd, 0x1, 0x4}, @mdlm={0x15, 0x24, 0x12, 0xd1}, @country_functional={0xa, 0x24, 0x7, 0x9, 0xe3, [0x3, 0x6cb3]}, @obex={0x5, 0x24, 0x15, 0x793}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0x40, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0xf7, 0x3a}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x1, 0x9, 0x5, 0x2, 0x8, 0xfc}, 0x2e, &(0x7f0000000a40)={0x5, 0xf, 0x2e, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0xa0, 0x0, 0x3, 0x1, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x0, 0x1, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x55, "1c95e2fc7e339339726b045b6786343f"}]}, 0x3, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x500a}}]}) r3 = msgget(0x0, 0x54) msgsnd(r3, &(0x7f0000000b80)={0x1, "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"}, 0x1008, 0x0) write(r1, &(0x7f0000001bc0)="cc13db4ad44f48673bc425b2f50e053f1b0233fd3dd45f90d2a03052e7434ba530a226dd55156c53acc81ac35bf885841babfff8f8e30db0c37d19f839f68a128b41bbf0f210714a48327c357740addac92c3550dd1c6953572a9bd99cf838d3b120ac425cd9b8d71432bf23", 0x6c) syz_create_resource$binfmt(&(0x7f0000001c40)='./file0\x00') msgctl$IPC_STAT(r3, 0x2, &(0x7f0000001c80)=""/180) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000001d40)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = syz_open_dev$ublk_chdev(&(0x7f0000002080), 0x0, 0x600) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000001d80)={0x0, 0x5e32, 0x200, 0x3, 0x287, 0x0, r1}, &(0x7f0000001e00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x294d, 0x4000, 0x2, 0x16a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x295c, 0x8000, 0x3, 0x262, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8ca8, 0x0, 0x0, 0x1d9, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7393, 0x80000, 0x3, 0x2bd, 0x0, r1}}], 0x4, &(0x7f00000030c0)={0x2e, 0x2, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x5}, 0x0, r7, '\x00', {0x3, 0x59d, 0x0, &(0x7f00000020c0)=@buf_1k="2233d9b4199041308ade43ab2b3a80b000734ab465023e600d090be8f4340979c32bbe56dfe4d5b73ed1871fdcd90645e45f9ac8f3685ddd3c0dee6b959a89909644bc52de2f323dc3bd54f934b93625672bc9d2399b38b78f7abde6df30e3c9240595bf206edeb1bf9049e966ef112094315fe61ac0669258e688748e664d97badf0c0c15ef660a10ef4ed2980fb410ae5a6fd709a4177af319e00e9397e0aa98489fa135745b0a62ce3e18cbc76c7047e63baea273a66cacf2ef5d0166bd98280024eac7a9d280d652cbf5b628becc0f2fb2c16be5f02de72c32fef8fbf54bffe18b3714bc047c24b950980edfe9fe16bcfb1948ecd9526e63562a0559ee351350ee9810247627c2d7c6433a23e4c00ffa58fa46092ba1937cc1f3710bcf9a9c437b80352d276f12b9936cf61926c86070734911cb0251b8a44ae0066f7003145ddd665b64c886d2973e45242de1d501d0330c8ddda8e257ea22b664ca90b85ec6a84462f76d6cb88e4599ec1d4de63453160a15e7db3d1f598824d988a627842219531ca70d1c60e1aecfb542384ff4fa4c05e0728b06729de5334dc54439775b18110706158a5c940ac9f4326f638b2d223d32e3dd68d0fe1b386c5c34f222d0e1f0fbfe07d231122ddd4a61bacd96c949007587e5718741b0168414e10936a71e54a5e89b36af65ed29ad50acfa9ffbe55d6c41c9bd4fe9d84febbbcbd7b34043c3c0bca0e8351ba140cea548f7ceec8d57ae9f08b8816d45bc85d0bbd4c5f59d11b523133b6a3e1d924de36eb8ed01a617d870f50707d3b34096d1f235fd47d4e65643e1299ab4ccce65cd8065f2f86430d10b6a4049a99f7875363b0308db854d9dce0d33c09a954df0e57a912ba87a0e47a1577a75c4763acef6961011f3a9f5eeeb9e190fa77865fddfce8a871fea0dbb7a8549294f4c436a3fd3cf93b04c2a3413af4ec3c79719ed83eaac65412d51ac3fbea404197aeafad7fb946921ed43ab10949cf91ae882277e7cc92482b6fcb0619060b8b987bb4398f975ada2d55eefdb91f560d614492539259063a67f28f8bd628e50907381c08efa45433f9c1bd2c84c2b8c8d02a416572c12beefefe63766284ddb2478a3a78c3d71f8f3d754008120de0b4d62fce4439cca0378b608f6a651fa679d3c158e422f6e9a7839bbd3dded19c1576cc1207fcf09f1f9611cd22f96508df1ded127530393b5e191745548322d170fecd99b59f74afe61d5cb56c86fa1b0818e0759c07f17d4a729b03b6e106a3308306d54f4bff681853cbac1f13d57be5a887ed46ee3e3e764864671830057e1679471714b14d5a0c7bdd908ddf50638e67efce47e3c49720e8590491aab76324ab2670748be2fe77f2c032a874eb3f5823ec10acda601ec3dd5d3a3be7ef04166893cfe7ce7ed6ff9a7b6d07ae20493460a610e6a729d"}}, &(0x7f0000003140)) msgctl$IPC_RMID(r3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000042c0)={0x4, 0x4, &(0x7f0000003180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7}, [@alu={0x7, 0x0, 0xd, 0x2, 0x2, 0xffffffffffffffde, 0x10}]}, &(0x7f00000031c0)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000003200)=""/4096, 0x41100, 0x8, '\x00', 0x0, @fallback=0x37, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0xa, 0x0, &(0x7f0000004200)=[{0x3, 0x2, 0x7, 0x4}, {0x3, 0x2, 0x1, 0xc}, {0x5, 0x3, 0x7, 0x5}, {0x5, 0x5, 0x3}, {0x0, 0x3, 0x10, 0x3}, {0x3, 0x3, 0xc}, {0x1, 0x3, 0x5, 0x9}, {0x0, 0x1, 0x4, 0x6}, {0x1, 0x4, 0xb, 0x9}, {0x5, 0x3, 0xe, 0x1}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004580)={r8, 0x0, 0xf, 0x4b, &(0x7f0000004380)="1b9d573a420ac8296b16d8751d94db", &(0x7f00000043c0)=""/75, 0x3, 0x0, 0xe3, 0x37, &(0x7f0000004440)="ecbcab84bc4092a81dbd144e80e90fd4001b3f90a6ec425b952bb9bf86028b4a274476214289e663aa167f7164e4958a044d9cfedeacdad564d4af2d4642ac76d434bb937f01aca76e3f4eca65e1589d24c1c243ec47001dc66f5e0b716f99889613f393d3422d327779d260114388eb3b8bb76ae8f3e78ad499599f66f1cf90744009f9f9e1b55124fe33c15c20fbf1a7d83c93881c85b8a3731fb4dd5cc765e56a7702199353015395fb0e41c5c13d064adc5ce8a093bcf8342e7a4a4ed2170225559d909b5074c04cb3db5f5fd8fc98d4c08b2268ccefadd448a138a539255f03d1", &(0x7f0000004540)="e9f111dfd526f197904b0bbf56a8cd9060ce1dbd89b05b49af733254209fdad231c2f24ad828032deadfd038117f5a988c27016e99d897", 0x4, 0x0, 0x5}, 0x50) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000004780)={0x0, 0x1, 0x0, &(0x7f0000004600)=[{}], 0x1, 0x0, &(0x7f0000004680)=[{}], 0x1, 0x0, &(0x7f0000004700)=[{}], 0x1, 0x0, &(0x7f0000004740)=[{}]}) read$FUSE(r1, &(0x7f0000004800)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000008880)=0x0) r12 = fcntl$getown(r6, 0x9) msgctl$IPC_SET(r3, 0x1, &(0x7f00000088c0)={{0x0, r9, 0xee00, r10, 0xee01, 0xc, 0x9877}, 0x0, 0x0, 0xf, 0x8, 0x40, 0x7, 0x100, 0xfdb4, 0xfff9, 0x5, r11, r12}) ioctl$KDMKTONE(r5, 0x4b30, 0x3ff) sched_setscheduler(r11, 0x3, &(0x7f0000008940)=0x1ff) socket(0x1a, 0x2, 0x9) sendmsg$nl_xfrm(r1, &(0x7f0000008b80)={&(0x7f0000008980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000008b40)={&(0x7f00000089c0)=@delsa={0x158, 0x11, 0x794, 0x70bd2b, 0x25dfdbfc, {@in6=@private2, 0x4d6, 0xa, 0x32}, [@algo_aead={0x6e, 0x12, {{'aegis128-generic\x00'}, 0x110, 0x120, "bae4f67d3317f10c0b0532f1b4903e2ca9c9b11bef9dab63d501b3215b432b48ee16"}}, @srcaddr={0x14, 0xd, @in6=@mcast1}, @replay_val={0x10, 0xa, {0x70bd29, 0x70bd26, 0xffff}}, @algo_crypt={0x9b, 0x2, {{'ecb-serpent-avx\x00'}, 0x298, "d45d2583ed992055d563dd5462e17a4b644e25a16aaa715818e65edd900d599cd4917fc49ffafb41cae37e26830a5344e2c82a426af75c7f4809d2481a67ef560c04b06b13970ac84d3b4eb4dff80caba5f988"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20008000}, 0xd840) executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@remote, @private0={0xfc, 0x0, '\x00', 0xff}, @empty, 0x9, 0x40, 0x0, 0x100, 0x0, 0xd0010b}) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x331020, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025647a31000000000900010073797a3000000000080005400000001c"], 0xe0}, 0x1, 0x0, 0x0, 0x4081}, 0x0) (async) ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, &(0x7f0000000040)) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) (rerun: 64) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/config.gz\x00', 0x0, 0x0) read$eventfd(r5, &(0x7f00000002c0), 0x8) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000300)={[{@abort}, {@acl}, {@oldalloc}, {@jqfmt_vfsv0}]}, 0x1, 0x5cb, &(0x7f0000000600)="$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") ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r9) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r10, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}]}, 0x3c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYRESDEC=r8, @ANYRES16=r7], 0x1c}}, 0x840) (async) write$nci(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="7105"], 0x148) executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/681], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2000}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xeff, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b9", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 5: r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0x8, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000008000000000000000000000000211df385", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)=r3}, 0x20) close(0x3) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0x7, 0x80000, r2}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x40, 0x700, 0x8, 0xe, {{0x3b, 0x4, 0x1, 0x6, 0xec, 0x64, 0x0, 0x1, 0x4, 0x0, @multicast2, @private=0xa010100, {[@ssrr={0x89, 0x13, 0x6f, [@loopback, @multicast1, @empty, @remote]}, @timestamp_addr={0x44, 0x4c, 0xc6, 0x1, 0x1, [{@multicast2, 0x8}, {@rand_addr=0x64010101, 0x3ff}, {@local, 0x351}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@loopback, 0x800}, {@local, 0x2}, {@multicast2, 0x2}, {@multicast2, 0xf}, {@rand_addr=0x64010102, 0x4}]}, @end, @timestamp={0x44, 0xc, 0xfd, 0x0, 0xa, [0x5, 0x80]}, @ssrr={0x89, 0xb, 0xe6, [@local, @loopback]}, @cipso={0x86, 0x5e, 0x0, [{0x5, 0x7, "cb9335514d"}, {0x2, 0xf, "d27f80cc8fbd4379d0d8777ee9"}, {0x0, 0x12, "3d944e32bb85e318f24edcd7adcf3b99"}, {0x7, 0x9, "d8666ca42e37b6"}, {0x7, 0xb, "99ff39926e420567b8"}, {0x5, 0xb, "cf343a1def1b6902c5"}, {0x0, 0x11, "f43ca8ac9c3d2de0bacf8378405ae3"}]}]}}}}}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000004800)={0x2020}, 0x2020) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x12, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xd70}, [@exit, @generic={0x2, 0x1, 0x5, 0x0, 0x3}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xe}]}, &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x10, '\x00', r5, @fallback=0x2d, r6, 0x8, &(0x7f0000000400)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x9, &(0x7f0000000480)=[r2, 0x1, r4, r2, r4, r4, r4, r4], &(0x7f00000005c0)=[{0x3, 0x5, 0x1, 0xb}, {0x2, 0x2, 0x1, 0x4}, {0x5, 0x3, 0xc, 0x2}, {0x1, 0x1, 0xe, 0x8}, {0x3, 0x4, 0xb, 0xc}, {0x1, 0x3, 0xe, 0x3}, {0x1, 0x4, 0x10}, {0x5, 0x3, 0x0, 0xc}, {0x2, 0x8000001, 0x7, 0x9}], 0x10, 0x200}, 0x94) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r8, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r9, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000100)=@nullb, r4, &(0x7f0000000280)={0x6, 0x6, 0x1}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") io_setup(0x6, 0x0) pipe2(&(0x7f0000000180), 0x80000) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x20, '\x00', 0x0, @cgroup_skb}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)="2a3a206782", 0x5) add_key(0x0, 0x0, &(0x7f0000000780), 0x0, 0xfffffffffffffffa) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000880), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) executing program 5: mbind(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x8, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000fff000/0x1000)=nil) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) brk(0x20ffc004) executing program 6: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x23}, [@ldst={0x1, 0x0, 0x1, 0x1, 0x1, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f}, 0x94) executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_getnexthop={0x34, 0x6a, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}]}, 0x34}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x6, &(0x7f00000000c0)={0x90, {{0x29, 0x0, 0x3e000000, @mcast1}}, {{0xa, 0x4e20, 0xfffffffe, @remote, 0x6}}}, 0x108) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) ioctl$IOC_PR_RELEASE(r4, 0x401070ca, &(0x7f0000000040)={0x4, 0x7, 0x1}) writev(r1, &(0x7f0000000480), 0x0) executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r5], 0x48}}, 0x0) executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xfffffee2) r5 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000480)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) splice(r0, 0x0, r3, 0x0, 0x38f9, 0x0) splice(r2, 0x0, r1, 0x0, 0x7fffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) r7 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x9, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r7, 0x1, 0x1, 0x1, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r11, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000001fc0)=@ethtool_cmd={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2c, 0x0, 0xfffe}}) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_open_dev$vim2m(&(0x7f0000000000), 0x25, 0x2) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x28, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x16, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000087000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003a00"}]}}]}, 0x170}}, 0x0) executing program 6: syz_emit_ethernet(0xfc0, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xf8a, 0x11, 0x0, @private2, @mcast2, {[@srh={0x62, 0x0, 0x4, 0x0, 0x3, 0x0, 0x8}], {0x4e21, 0xe22, 0xf82, 0x0, @gue={{0x1, 0x0, 0x2, 0x9, 0x100, @void}, "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"}}}}}}}, 0x0) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000090c0000af9b0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028006001900040000000500010004000000"], 0x44}}, 0x0) executing program 6: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) (async) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000200)='./file0\x00', 0x81, &(0x7f0000000500)=ANY=[], 0xfa, 0x2c0, &(0x7f0000000480)="$eJzs3b+OG0UYAPBv73z2QoGvoEIgVoKCKsrlCXxCFyniKpALoICIJBI6W0iJdBJ/xHIVEhUNJU+AhJSOl6DhDXgAJDpSRAxa767XJo4vlmwOxO/XeDLzfTPfTNb3p/Dchy9Pz+4Uce/ii18jz7PYG8UoHmVxGHvR+iqWjL4NAOC/7FFK8XuqbZKXRUS+u7IAgB3a+Pv/w/plf7dlAQA79M677711fHp68nZR5HFz+vX5uPrNvnqtx4/vxccxibtxPYbxOCLN1e2bKaWyV1QO4/VpeT6uMqcf/NzMf/xbxCz/KIZxOOtazr91enJU1Bbyy6qO55v1R1X+jRjGiyvWv3V6cmNFfoz78cZrC/Vfi2H88lF8EpO4Myuiy//yqCjeTN/98fn7VXlVflaejwezuE7yIw8AAAAAAAAAAAAAAAAAAAAAAFtzrbk7ZxCz+3uqrub+nf3H1T8OomgdLt/PU+dn7UR/ux+oTPF9e7/O9aIoUhPY5ffipV70rmbXAAAAAAAAAAAAAAAAAAAA8O/y4NPPzm5PJnfvb6XR3gbQfqx/83kezrJGCz2vxvqsQbfWXtNcs0TstzFZxNp6qk1s6VguazxX15zKurRu6Icfn32ePCLObueXBx9Ua+Vb3EX7373QE21PtvoMB/PgvH1Ifmp7UkqpH5cs+kLT6D8tJj3x+F2smbC/cmi42Wn05o9fuSY4sqe9L755pXtfNkPZfBe9+sT6S+e81DhoGm36n205bUy+0fP85NeKgds6AAAAAAAAAAAAAAAAAABgp7oP/a4YvFibupcGOysLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5R3d//36BRNsnPENyP+w+ueIsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8D/wVAAD//74XUwM=") (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) getdents64(r1, &(0x7f0000000000)=""/134, 0x86) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r3 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x6000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x1}) (async) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) (async) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fcntl$setsig(r7, 0x3, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000140)=0x81) (async) r8 = dup(r2) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x1c3040, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r11, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="f8ffffff0000000000000000070000000000000099dc50b4797f297303a15482b6231e110858b5b35c3c043552145248e16ebd3ed2e6640230b615d93e76db1014a5af97edf7fcdea7ed52d49aaab0da98a80a0d544bc778e518dfcc63e00f4b8d998bcb010b46130ea1fcdf45e7a1d34d0aec059163c906499f7010bf393578db4cb4ab8022ae5a8f6775eb3b7416b33d8e79e2c15473e17e0cccbfb17fee9dc37e9a8475aa005527f303485d7c4fe71b0b3668", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000500"/28], 0xc) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x1, 0x2, 0x81, 0x0, 0x7, 0x0}) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000040)=0x3641) (async) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0xfffffffffffffe27}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000180)=0x1, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xfff2, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x804, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x284, &(0x7f0000001d00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_genetlink_get_family_id$team(&(0x7f0000000140), r4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000b00)={'syztnl0\x00', r3, 0x1, 0x80, 0x6, 0xff, {{0x1f, 0x4, 0x1, 0x7, 0x7c, 0x64, 0x0, 0xa, 0x29, 0x0, @private=0xa010100, @broadcast, {[@timestamp_addr={0x44, 0x4, 0x5b, 0x1, 0x1}, @ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0x14, 0xd8, 0x1, 0x9, [{@multicast1, 0x10001}, {@local, 0x7}]}, @generic={0x86, 0x9, "cbbff81d041802"}, @timestamp_prespec={0x44, 0x34, 0xcd, 0x3, 0x8, [{@loopback, 0xd773}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xeb7}, {@loopback, 0x40}, {@rand_addr=0x64010101, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x1}]}, @lsrr={0x83, 0xb, 0x7f, [@loopback, @multicast2]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000004c0)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000580)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000003c0)={'sit0\x00', &(0x7f00000005c0)={'gre0\x00', r3, 0x8, 0x10, 0xfffffc00, 0x7, {{0x1d, 0x4, 0x3, 0x8, 0x74, 0x66, 0x0, 0xee, 0x29, 0x0, @empty, @local, {[@timestamp_prespec={0x44, 0x14, 0xb8, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@multicast1, 0x81}]}, @cipso={0x86, 0x3d, 0x3, [{0x6, 0x2}, {0x0, 0x8, "40016cf6cac8"}, {0x1, 0xd, "3c1bbc880beccb130515bc"}, {0x5, 0xa, "219329936e61bc6c"}, {0x7, 0x5, "6c551e"}, {0x5, 0x11, "62d44028d7704e182e788b3534c1f4"}]}, @lsrr={0x83, 0xf, 0x24, [@loopback, @rand_addr=0x64010101, @loopback]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'ip6tnl0\x00', r3, 0x29, 0x2, 0x1, 0x7ff, 0x42, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x700, 0x81, 0x3}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140044a60000100001000000005f000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000008327020900020873797a31005fd7870300000008000a40fff7fffc400000000c0a01010000000000001f000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001000000000000000000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4044044) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a000001894426b82af0e2e5bd2f52b0037eb00900020073797a3100"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x4008880) close(r5) recvfrom(r6, 0x0, 0x0, 0x40002062, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'ip6_vti0\x00', r3, 0x29, 0x8, 0x2, 0x3, 0x40, @private1, @loopback, 0x8, 0x8, 0x93, 0x8}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r8, @ANYBLOB="000a000000000000180012800e000100697036677265746170000000040002801c001a"], 0x54}}, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-socket$inet6_sctp-bind$inet6-ioctl$TUNSETIFF-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$nl_route-ioctl$sock_SIOCGIFINDEX-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$kcm-socket$unix-socket$inet_tcp-getsockopt$ARPT_SO_GET_ENTRIES-socket$nl_route-sendmsg$nl_route-setsockopt$sock_attach_bpf-mkdirat-mount-socket$nl_netfilter-openat-write-socketpair-bpf$BPF_GET_PROG_INFO-sendmsg$kcm-socket$nl_route detailed listing: executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program did not crash bisect: split chunks (needed=true): <16> bisect: split chunk #0 of len 16 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 2, 12, 16, 30, 3, 23, 30, 30] detailed listing: executing program 6: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x23}, [@ldst={0x1, 0x0, 0x1, 0x1, 0x1, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f}, 0x94) executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_getnexthop={0x34, 0x6a, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}]}, 0x34}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x6, &(0x7f00000000c0)={0x90, {{0x29, 0x0, 0x3e000000, @mcast1}}, {{0xa, 0x4e20, 0xfffffffe, @remote, 0x6}}}, 0x108) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) ioctl$IOC_PR_RELEASE(r4, 0x401070ca, &(0x7f0000000040)={0x4, 0x7, 0x1}) writev(r1, &(0x7f0000000480), 0x0) executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r5], 0x48}}, 0x0) executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xfffffee2) r5 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000480)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) splice(r0, 0x0, r3, 0x0, 0x38f9, 0x0) splice(r2, 0x0, r1, 0x0, 0x7fffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) r7 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x9, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r7, 0x1, 0x1, 0x1, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r11, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000001fc0)=@ethtool_cmd={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2c, 0x0, 0xfffe}}) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_open_dev$vim2m(&(0x7f0000000000), 0x25, 0x2) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x28, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x16, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000087000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003a00"}]}}]}, 0x170}}, 0x0) executing program 6: syz_emit_ethernet(0xfc0, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xf8a, 0x11, 0x0, @private2, @mcast2, {[@srh={0x62, 0x0, 0x4, 0x0, 0x3, 0x0, 0x8}], {0x4e21, 0xe22, 0xf82, 0x0, @gue={{0x1, 0x0, 0x2, 0x9, 0x100, @void}, "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"}}}}}}}, 0x0) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000090c0000af9b0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028006001900040000000500010004000000"], 0x44}}, 0x0) executing program 6: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) (async) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000200)='./file0\x00', 0x81, &(0x7f0000000500)=ANY=[], 0xfa, 0x2c0, &(0x7f0000000480)="$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") (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) getdents64(r1, &(0x7f0000000000)=""/134, 0x86) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r3 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x6000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x1}) (async) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) (async) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fcntl$setsig(r7, 0x3, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000140)=0x81) (async) r8 = dup(r2) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x1c3040, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r11, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="f8ffffff0000000000000000070000000000000099dc50b4797f297303a15482b6231e110858b5b35c3c043552145248e16ebd3ed2e6640230b615d93e76db1014a5af97edf7fcdea7ed52d49aaab0da98a80a0d544bc778e518dfcc63e00f4b8d998bcb010b46130ea1fcdf45e7a1d34d0aec059163c906499f7010bf393578db4cb4ab8022ae5a8f6775eb3b7416b33d8e79e2c15473e17e0cccbfb17fee9dc37e9a8475aa005527f303485d7c4fe71b0b3668", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000500"/28], 0xc) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x1, 0x2, 0x81, 0x0, 0x7, 0x0}) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000040)=0x3641) (async) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0xfffffffffffffe27}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000180)=0x1, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xfff2, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x804, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x284, &(0x7f0000001d00)="$eJzs3c9qM1UUAPAzyaRJdJEsXInwDejC1UfrE7RIBbEgKFmoCy02BWlCoYVAVYxd+QQ+gc/jRnwBH0BxZxfiSDqTNKmTaGvaFP39Nrmce07umT9JVnPzySvDk6PT8+PLL3+KViuJ2m7sxlUS3ajF1NdR6cdfquMAwBN3lefxa15oFqGLxYzGksq09uDNAQAPYv73f9O9AACP4/0PPnxn7+Bg/70sa0UMvxn1kihei/m94/gsBtGP7ejE7xH5TDF+6+2D/UiziW68NhyPepPK4cffl++/93PEdf1OdKJbXb+TFebqx6NeI14o198dRP/d76ITL1XXv1FRH7WteP3Vuf6fRyd++DROYxBHZW/T+q92suzN/NvfvvhoEp3UJ+NRrznLK7Prj3phAAAAAAAAAAAAAAAAAAAAAAD4T3uezXQX99+Zbvy/Yn7F/kDjuf15trMsy5Mi/6Y+jZfTSDd57AAAAAAAAAAAAAAAAAAAAPBUnF98fnI4GPTP1jqYPtZfMRV/LEaaEXH/tZ798+Sin6iXrQ2SiLut1YjmdeXfJ9f/GilXra5qT/rpnyVprO8SJLNIe37qWRRrTSLtYjAX+dert+J6ML27Tg6T6NdWnrFW1U2yhkFecfvVl1Zt3Y60yyOoSG6vWH3rxXv1nHeWTCUR0ZidzMWc9NZHuLHec/jgXz0AAAAAAAAAAAAAAAAAAMAtNw/9VkxebqAhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANiAm///v8NgXBYvy8nrk0EaZWTDhwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/wJ8BAAD//2BEXgA=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_genetlink_get_family_id$team(&(0x7f0000000140), r4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000b00)={'syztnl0\x00', r3, 0x1, 0x80, 0x6, 0xff, {{0x1f, 0x4, 0x1, 0x7, 0x7c, 0x64, 0x0, 0xa, 0x29, 0x0, @private=0xa010100, @broadcast, {[@timestamp_addr={0x44, 0x4, 0x5b, 0x1, 0x1}, @ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0x14, 0xd8, 0x1, 0x9, [{@multicast1, 0x10001}, {@local, 0x7}]}, @generic={0x86, 0x9, "cbbff81d041802"}, @timestamp_prespec={0x44, 0x34, 0xcd, 0x3, 0x8, [{@loopback, 0xd773}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xeb7}, {@loopback, 0x40}, {@rand_addr=0x64010101, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x1}]}, @lsrr={0x83, 0xb, 0x7f, [@loopback, @multicast2]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000004c0)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000580)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000003c0)={'sit0\x00', &(0x7f00000005c0)={'gre0\x00', r3, 0x8, 0x10, 0xfffffc00, 0x7, {{0x1d, 0x4, 0x3, 0x8, 0x74, 0x66, 0x0, 0xee, 0x29, 0x0, @empty, @local, {[@timestamp_prespec={0x44, 0x14, 0xb8, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@multicast1, 0x81}]}, @cipso={0x86, 0x3d, 0x3, [{0x6, 0x2}, {0x0, 0x8, "40016cf6cac8"}, {0x1, 0xd, "3c1bbc880beccb130515bc"}, {0x5, 0xa, "219329936e61bc6c"}, {0x7, 0x5, "6c551e"}, {0x5, 0x11, "62d44028d7704e182e788b3534c1f4"}]}, @lsrr={0x83, 0xf, 0x24, [@loopback, @rand_addr=0x64010101, @loopback]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'ip6tnl0\x00', r3, 0x29, 0x2, 0x1, 0x7ff, 0x42, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x700, 0x81, 0x3}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140044a60000100001000000005f000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000008327020900020873797a31005fd7870300000008000a40fff7fffc400000000c0a01010000000000001f000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001000000000000000000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4044044) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a000001894426b82af0e2e5bd2f52b0037eb00900020073797a3100"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x4008880) close(r5) recvfrom(r6, 0x0, 0x0, 0x40002062, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'ip6_vti0\x00', r3, 0x29, 0x8, 0x2, 0x3, 0x40, @private1, @loopback, 0x8, 0x8, 0x93, 0x8}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r8, @ANYBLOB="000a000000000000180012800e000100697036677265746170000000040002801c001a"], 0x54}}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30, 30, 23, 5, 22, 29, 8, 30] detailed listing: executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xff000000, 0xffffffff, 'ipvlan0\x00', 'macsec0\x00', {}, {}, 0x67, 0x1, 0x40}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "bca95b91b2e840f98aafc5c24660edbb4e1d42a5b55184a18eeacfeed053"}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0xc2, {0x8}}}}, {{@ip={@multicast2, @multicast2, 0xff, 0xff000000, 'syz_tun\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x6, 0x3, 0x2}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000520004022abd7000fedbdf250a0800030009000000080006008000000008000100", @ANYRES32, @ANYBLOB="0e00020001040000000000"], 0x34}, 0x1, 0x0, 0x0, 0x42}, 0x40000000) write$binfmt_register(0xffffffffffffffff, &(0x7f00000006c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010065bd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="24002d8005000100030000000500040000000000080002"], 0x40}, 0x1, 0x0, 0x0, 0x24880}, 0x4000880) r5 = socket(0xf, 0x3, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000840)='net/udp6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000240)=0x85) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000600)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) mmap(&(0x7f0000611000/0x1000)=nil, 0x1000, 0x0, 0x20010, r1, 0xdefd6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000002dc0)=[{{&(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000940)="4422a2c520246020462a98869f259892bb60171f1b5035e2ebba27e3e8eac12ceead23b523c5e7b99951c6d34399f2692db3f2742a954a33261c059b41fe29dbb0f57483d0fb0597f805f80e83320bbb14058c08d67be1ab18006301ff2f21435fb1ea0357903e9a5e9eb559c02eb68f74dc78e59eb05720647290", 0x7b}, {&(0x7f0000000a00)="320202faa944b8a4b4b48b88842c9fed5ad54f7bc08d22c69f0034a1a378c7ce27a37be8f398443861f73e0f0d601159251728567aa672b9250b5cf39646e0fe7aa50ea58bb888d45c44a10f13f0e833f6bac78cc7f50630afe01eb59e8d95f5d1d94eec96fc3cf0e6efa44a98f0e7ce01a326e5bc00d5c8df70229de05a9e94b3ce913ec52c15e47d426b2374d7a258c763428ee8fff252885cae6546002d8fe16ef0c4358b5c961944", 0xaa}, {&(0x7f0000000ac0)="e8130e6b82e3370b01f6f1bfc144cfa3df0dd97095fb96b991ceafca9d", 0x1d}], 0x3, 0x0, 0x0, 0x4}}, {{&(0x7f0000000b40)=@file={0x0, './cgroup.cpu/cpuset.cpus/file0\x00'}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000bc0)="59c686f88a7bead12747cee70e7116ca4d4fd5007b96bad9e65c33fb9e8b6790e4d68382d74505ca046ea87e068a92c856c278dafec6379487a2d8f30de3fd0636d422b4e4be7076e0b9484aea3e4e742ab8557f2b736eb06e26d096ce783d5d0d3cc4f312a39b168e7cb08c1c0485ae955f66bfb60e43f50d3815da274310571c3016783b1605ef5fac328dc8ddab3db62c7fa7e541826ae42af57349cfed158717e684c162838b11e2d383df3ba3cbe0980410b4b11f5ef92b", 0xba}, {&(0x7f0000000c80)="2dfbd99d2030c84b6a75bffaa6b661e7f2fe6fec204967bdb30728d5df011e80e626c5ec45927abfeb17c6f92a2595e8adb5f0a24a1f40b95b56eed42abd01885f217c400fef94280cef5ac44202610cd9063fa41a1c15614d9ef840bd0166c02027b5f73bfdf8b59f5ca2937faef9cfe2255af9ba7076f701da50fd2b8bae1a4889bca407b7ec5dcfc13c2c80a8", 0x8e}, {&(0x7f0000000d40)="1608c14ad9aebdbb395221f9b9ac4cea6d70b7896a40838303ac4bcdc486ef8fa7f3ed81193dd9b053f336f2ee400a55aeb8b0975910046fb3f7a999c09a07c7316a2c6babd7065ddda4ef934dd6058facd2e0311573402979e461223a03d45b29132cb06d602b341ba9966dd669c9bf391d71ee3e8fc83d867ba29b3a3a0a7761f29365acf8be519b249f185b55ee7de8", 0x91}, {&(0x7f0000000e00)="0de063faa3ee177929990e67b52868132b4e7a94b3f6371bc706ef874169be3389e56cce40d4313f4e32d82ab8e8df839ed8941b5e77b673a74862", 0x3b}], 0x4, &(0x7f0000000f00)=[@rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30, 0x4004000}}, {{&(0x7f0000000f40)=@file={0x1, './cgroup.cpu/cpuset.cpus/file0\x00'}, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000001a40)="29ad4e57ea429b90dc661481ca3aa697203ac821efe0fd027639dd4b7b866602aac334cf5663684852d9c0c73ae751cb8c598e5913f0bd7a7975965ee62a8a7abf0b309f8635676cfd7b70a2df1b6cffdf0e088c4b675ecc6e8c4c0f2935b42717e3c924356dd8297dfc809059aed03d6de5c4b5eb3e099cb2707f6876e8c2fdfe5cbb2d145e405abf95932b043baf93cacdee5709cd2f0568b45990e1bd05298630c9354d686647a770d73078367b84c287e66530764eb44e3b9241350887066d2f8154c1ef149f573d09e75955af04d9d564d6305f85eb734004d401701e3ef0445fc3dadcb423c00c4cde2aaa11eb86603fc87aa51bb5ea72c844f2af8786752f78713ca4ed76f3f25d5495e452285fe48a7fc894c5643c9fc39e4bc6e75c1f83cf62c4eaa18698eb80e3764225fb6f95051def327dbefd2156d032b454ca65c0b25fe51446b5ad076d6691ed2a894fe6613dd0a07b6f8a44646e1ef789d9ae9cb608cbc78b61e5be2b1aad97bbc4c3ce5ef8a3210e1a44643a92dd51fe40649b88018287d1105355007066e8f93bc55265c1987b034b6bee54a482216fc305feb82e7ea4a7e061bf5dd3cd8d8698c2e6311b1b207ad39da5a68e259335d172737e15b0006345eeb2133294efd13d514e1b2b1d568cf5115949aea6e0fa0e428805fb60e90dab334311786550e0b32b3147a9dcf47d46a588013ba5dbf713c4c3b32f6280e90874151c833d7363c5b0c7799f71b83ae407e8d12ea0e2d125637886f88fc04bbb29ae7512a1a2662b63c65928153c663094866b19fe984b18cc4d28b9f5d8ef296262244b9a3d603ae5ce231704c411eb2877a33b57dd2954379d3e4c806c3157d59fc52fa9c48ea91376bda5e8c9ca029ac309a7a0139a6688f79eb45c0b6960f3052c757a2f1c8b9af2f59bf13f014a86e9b4e69bf163b846f6f2ecf6ffe800c6dc9134c0ef204ed20e8b0495dc71156cadce870881b59e7b8b0a6788f349f8cf1d35003df6d0a2b636286953b99c16b66e1b891a56edd0990d7b308a5eb14c8ba5854dea5573c4db31df0ec88fef76608cd4f2356b7a66e4f5669412423b24b77db879712060b99baa28e4a6b13437430756518bc57ad0f5321c3b8e8658912211d02a844fe6aafac74eb75815abbefc2e827682c0e1566fc38a3404c960263ce16495c40f83d1780c16a35f108ed99b2aa616fa22c4d6695e405fbbf23a04de85cc3820a9058938c11d06e145d06ef6993e11f69020ae2de3d881908a4f62ee1ba780eac60f09fb8d158de6d9ca67824ad65e2acefa814b4d51dab038f4af52f35045d4c67ab29ea834c38c716f72442b4baf2b49c8cfea891657cc213d56d398c77b1fc445786dda84ad89960d8e5c0ab013513c36353e3f38aaf125caf06bb6de81721492b223ffcf14ac8ea91d3bdf49076e591979c3945f5eb36f6f5035be5fa180bc043c4c161081b58c15d9c95e0cde0da7f1d22c19c0d9e40af623ea5739eb405d02cc1e115e3a921b7c69eb6bc0770b7e5d283300c2aea166c0de020da6e8c662730d88b76d6629821006af3e1c0971bb2347952c3b7923481802eeb7ade48a5de8759de3feb217f6d742edb0b46c1bf1ce6801bfbaacc62c01fa1c6babe0b35cbc8475870ceebef7bae4e85934a51835dedb5724470b66d6022dcaa695719c8b09e0506e64569ec1241d27f52fa723fd1ab250ddf5b42fbec944120a5bf473b9f3dc46a72fff209623d719dd3f688fb92bce700b8ee0b9f3f7019389802a426dc7d12733db2ae9f37050da1f9d7972d5cdd9a915ebc514948e70f9cc1309f78ea7ec874e98f43a2484dcfd03456822365a7fc7567d9975fe84e5f6ff5e4ad4de4aa809558314928120ac9105e154422e2d9cd99a41e8984367070e70b9aacd7e433959130e8a3e90dc216ad600dc5440c95802ee4c7fa865a7c88368b88d29d174bff2be11e22a58805c09450939a9042ddda7b91e8c387087f953bedb38bc019cc930507613c172ebfd299fe22ea095b32c48ffbb10b81e1df7c54ceff8b59b0757e76dc8a61cf4af9e5770bc90936061723e91ce2049d9c603a3f32e4f51288652746de4d6f9002cc0de511c5185946820bf1f29bf8970f912f3c15d292e9ec3265c859975b9845b794b6ae7aaf93def131f790e8b62dea2c2442a65713fed876c81ddd978378307d39b457c3f53bf5e92759ea56416777b5874c47f652c68aec75a4b04072f838de1f0a712b0860b1389e742ff743a5d718c6270865368d4e0519ba8afee764260a3e758782703e7f806cdb971c2f9ade112dfca778099587d156e1370010cbe3e71268f46c5351ba4a1d9b397f6ec207c6ab342304a96acd04cee05f3b0a8b4da73651435e6b71a2acfc9f3ff187a8250ed0ad088a89113a23be3b565e593c924cd35e25660b4d9e29d8423e6ecef35f79e56055547ee7bd5ff553c43e616211bb4b357604941209088122e1aab02fafb482b8a31d0ae4119dda8cc0de7b64354e16b2766755f0d791a4ba391004bbcb1251fe1db8335021d408284d0ac4d87fbc9b874d2886f5aa0d8497791083600c819def73aeff8469ba43aa49dc5fa394f9535b42d0e1f58361fd3e92cbdfb2684216a71d2551e4edd3bbdc26ce967aaad4cacffe9f92836ad8a66876ec38205b25a6ffb626fb6abd37f5466aeabe77e89de1525329ab6f3d8456becace50090a4357085da1ba47fc4aef65cc72a770dcd0e6f94967278c449aae730ee8cf410bce9e41fbe0264fa5484e2d87e3da957a3bbc40aaddce95a6ca4292f350e4a3a91a835ed7080312998d55b95051144709100e3603eff4b1b597db874c97c569e1b6f728e8f1c4bdee9c1d88942db1dedf825e80db8d165616d61dd63ddc606d43b1a2e5b201c1066656188134aadf4fb5a0996dc716fe497755bd250a41a86148a9ebde7c424b0f6ad14452d4d8b0962c1a66afb49bf8461675bc363632635f44b425692de5bace27f92a56c5ee54156a0d08b521bcb920d61fcb5cb4dcfc70a6df276127129e7b0a22f6740ffa64789d94da0ec3ab52f153e481dfacac42362d6fea3958a5f0265bb329170f3db688e7294dc83356027b808abf0f6d10287e999307ef6e8ff475915e553961e65ce55b3a3415c47c1e95d00213e539a78ea8a6983863b8b4635676fdab7993141cc89abb7387cb3a59cd6cb7189f38bf132c1db454314aad5ab1c684782ac25713130118083a774473676adb3b4d7a1bc5e6edb03f570b64ae5089d50174349708f2ba170fc85bbd5f5f303e9846fff39e2eb99b10eeb245febba96cb981636bb3ba1c83df61d310544417fbf435fd8508604abec319ccbf7009d3f0f27d04b1a698ad5b76abc083d6926fdca36366daaa1f27cc0b167d651ceaf4ee48186789b56c3d42566499ae1848788eba6f94836a70fa3b745dadb33fccbb978edbbbfc5fe72f70cb2d0a3a9b738858e1bbd2def02edafdd05aed853ae04f3c56e5cdf39ac3435453068f01035f4e37c6cc25aa16a80b0239ea3ccfd6dbcdc5588ecff82f674687fa8b9d542390dacdbc6647f32d270be1c3d129757256084c1ce501d03feffcf4adad987229af4c6507871391982ee19f59f41aad9418afa908b32154a13012a9f0da24da0a451acc6804c5193ab21d4d75e6c06edfe8ec95f7f8a8044aa73ec7d114dea6f7b44374f3f62938d5956103acb86397ce32e025848853bf63e7e2994faea6d31596eff1c73059751eea4a404138bd919a4ce8786de80e361a5fcfc129c23d6bae9430b203526a0feafe161910d2a6d4bd8319cce19f385529968b60eb38e995f9464267cdc51e1f5b94ab54d9f902c508c36cb2afb7aa26f45a2bd3b30217a6a611001a991bc2ba6431927ac57a292d7c1d7244bbc6c68a22a43ce500fd859fc13ab05fa4f52b122e4cd720c143218d8a8f5403d4bba3fe8c044059b9f7273bf0f2d0c74b7a052a4ed98304d41c2d9ce7cafd91ae796d6076f35915b52e603933642ac38e426aaffd57d84b0db99e98207142b6460b28d1d1c57d80c531112a2c3c90052520b7cb20585b92f91bb22968be48cbafc64d4c5bd6bd794e240cd70f291e1b62fea42996419811f05b1345239f6bf165fbc75267d9015a08ace60ce0da8b70cf5debac54d3fad0afdc083c175800ea3376be1dc9f771e57af3e30b18d57f1df2ef2430b574555e8aa7e859afdd3744e4d276b4b7f8f021f0aa7cd95778901026068254461c2636fa206734819b0f5833009578269183f8ef5f283165f4ac3ca4405a20fb2cefb132aeb0b55c7cc23f3b50f18af95dcd924dcb8dcd0112d835cfa79a942d66f220b4a77c622c303f37ad197d9ffd923de60b631d30fc35f2c46dc423840881f5930fe1fe4705013973425e3a8a0733efc2d69b1dc2390b3eff1c8e0e4608eda73161feb693702488bcfa36f0e7bb2d5d0930918debd8b5234042b357e56b3d76077d58c190efbed216ce94535559b8eb88fc25252d8a3e6bd3f63b15020475167730d90bc5e5dd60736977522643939bcbf57e830fe05accf4d06caf93a33b0b2eadde9bb13df90af396469e8818a81d94fd218afdf08fdf0e853e4785af0249415aae3c17263ff10df8243caca405ed4ff9278c15c8c25d02aa9d1070663cbaa4db8633e5b48fb19ddbeca573c7768ddaea2c44ba0b9ee48ff449705d1fa4a2978b509096807dc577ed79ce8efe593ab522cc4e22733c5ad8436fd3e1d1900d03602480994e7e7aae9b345e46284566f6908571bf71c560de787d6068c6ee54a116082898418d1f13bac08c8a5a49476128892aa78650ebc436ff614fc13e2231155e2e75a6c656d1b9b023ded8c4432b35ed9204f50a826069393440ad31f3e9329abd559eccf4b1df2f1cf6c77205dbb851f3280285d295a41132828eaf2694d7b7a7ebce39267ccb2da8fb6a50a44952baa5aaea5c147df24a6034c9b0ca0de01076ae9d5c71350a4c90af5ea05c51ee40ab2ce1a1b0b05be3d09170aee68d2c0153936dc9ac808968aada67e8223598be915cbb339da47cf01d5af81cc51882d285f49742e3c9527b0e28561fc6a3420839e80f209deb7e6fce14ab148024d59a00dfbd72848dd8d8e7fa836588ec628855e68dfaab1efee55549631806a9a5414ade2c43f49c3f69f859b68470a27c93c539ab19b2debb4554b9f15c79fc08a4eb46e7c59898dda49f6ed20f142d94328f2aaba99ab495dd342c50ce57431d2434a7062e8dd4be93b34b848cf4da84505ce660ddcc113fed6515d47eb367ca6ee5735c8b32cccca508edafeba8672665a370a0f179693013130428e06821a2144b9559bc72e302459fc9edb539b623153df0ecf92077701f5ea52465279d2aea06910a52252a37be0a24251c6adc0bbf1143fe3ace8ced28fc5e156306d004347fcf55b63723fb1b78360305b1c23a0dd0767466416907a9f0ad2a9f5111417e2f5027f02e961fbb1c721a8864895c51afd9a20a852f1ae9494e373e0a6472967e1a664f8876fb94692ccff0f2e0c5e9fb567d00c3f8d5afc717fe592c0bf30d2a45b77091a04889c453032c019cc856c76e8342addbf8a18670feef02745214cbdd99265825e8e4236c71b7c4e7d88ee3b66c670cf6421f0c8a29e93e1ad2ace89e637fe186d1cc77cf6f1bdfebf0f5167bc4484f69cc3de4da2bd21cbdb554eb4a46f7c3332953f1fbc87c0bae1f3429409fdc2cdc1c36963d0be1ae7c40e06adccdd1ab0fa68d0616273a40dfff2e120916dce7c94", 0x1000}], 0x1, &(0x7f0000002b00)=[@rights={{0x28, 0x1, 0x1, [r9, 0xffffffffffffffff, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r9, r9]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}], 0x60, 0x4008001}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002b80)="82a3b1ff73de72210a1101d32c6828a09c1e621096c8f983ebde0a6e89fb9d88fa0563007336c0a46582a1af88c181dfd3f5c22f475b613d65f15db3ecf341446b2d77a14c48d205ff8e792b23813e33ddfe185db1493c069c40e29e03fe18ea24f611fbef4e861a62ad51e5ed9a9c482a067ba008657c9a6b1fb8130a9cb638efb106e88971974d2d2595b587265c770b594e908a0806c1cbc0c1eb5d7401abe8cedb5e9a8fbcab73752212b1135c5fa7834c12bb535c9a6258bbc0d9991ffd6693493711f6a6b3eba4ad1216812de29095", 0xd2}, {&(0x7f0000002c80)="d053918b30a6cb65f7150fc28e3020413b1c428300aa8d161649f4537762f21bd523eb0d25131cc156a8905d463da525592cb3b9a1721e030c0630c3b3ca77e2257fc71a18bd3473cf2f227ba738fbdf1dae27acb6c5d8b499cc6f8ed01c4f01a6b78de6171ca348ff95d813c8cf6306064d0a5760fedb6c21a41eabbd1c3c565218814ed336b239b550905e093aff1d7a83e8f560b30bc2a751a81ac5cb298f9a22fca4aa82ecbca181302c8615628c22378809407141d733f6111486c5aabd46c3ce15bc6ca1810d24689021e7ea398a84d0927e2fd2109b7f6e22", 0xdc}], 0x2, 0x0, 0x0, 0x80}}], 0x4, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r10 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000540)="74202623f7fa74b7c7a1e61d6bbda8148fa322003e0e9e40ccec8da33a55962c647cae1cd27779e8f9a8fd92cf1305339fa8edc8da25cf1217fc520d0839ca398677b7ac299d2c95514beab515970fbf99df234fd36337cd812cc056330a23fa9c535b25af4cd40302082a4f53c257d102795332fe9f4727af6ff4b8238a92cde02d75dd72ff353714f74f5ed221", 0x8e, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r10, r10, r10}, &(0x7f00000000c0)=""/61, 0xfffffffffffffd7e, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r6, &(0x7f0000000040)={0xa0000012}) lsetxattr$system_posix_acl(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000bb9ba80ef1a26696478103853dbef7d1585f2a9203395d9f1a0fd75fd1a14107cc67a72a06438ec858069a9096ff2adc525ffaed7252362c0b03000000000035ddd6921c34", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB="10000000000000002000000000000000"], 0x3c, 0x0) executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xbe, &(0x7f0000000600)=""/190, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0x6, &(0x7f0000000180)={0x8, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)="b405426ea90c9dd15e8d6b355ba051445771151690b436201407e508117aca0e9a8b988458de96b43682c6c2f024aa871b130be21d3587d35de825956e5ca79a4a7c4e159e7dfba036cb993e4bf1b566eba433b6eb0262b872aee78af21be91cdfcd0a86456b399efa2ba0c35ac5cfb98a884693387bbdac145928b3c6cd38a1234f41363789b44b6799595894e2ee99b505f4f9", &(0x7f00000003c0)="140dbc1289210e3ca292eb589285134b909e9b82f71c748fca26876a6758ad5ad3d35a00390dfe82047a565842959bb7cd2acb9f56f724740353003f16b64905c2fb78f8466544f3ff67955a5494d053104443add5bf8397090c67a4c69a5d31fa770576f630fcda64a9547d4fc8ddf0d2188accf1f51832b838046a0886c2a3e40c5565521301f68aba3d89602997d78a510875b0b03b8afde573d9f70e4170ccafb589d577786cd719e768b733d48cbc2b6043b5a106f697568b6cc53dea", 0x5}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000006c0)="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", 0x100}], 0x1}, 0x0) unshare(0x28000600) clock_settime(0x1ed5d7403, &(0x7f00000000c0)) r6 = fsopen(&(0x7f00000001c0)='hpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x8e) unshare(0x4c040480) mknodat$loop(r7, &(0x7f0000000140)='./file0\x00', 0x4, 0x1) r8 = io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x10420, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r8, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) socket$nl_generic(0x10, 0x3, 0x10) executing program 6: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=@encrypted_new={'new ', 'default', 0x20, 'user:', '-\\}', 0x20, 0x9}, 0x2a, r0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x4002) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x84) r2 = syz_usb_connect$uac1(0x0, 0xe1, &(0x7f0000000140)={{0x12, 0x1, 0x311, 0x0, 0x0, 0x0, 0x20, 0x763, 0x1031, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcf, 0x3, 0x1, 0x2, 0x0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x33}, [@extension_unit={0xd, 0x24, 0x8, 0x2, 0x9, 0x2, "722a6563e097"}, @extension_unit={0xb, 0x24, 0x8, 0x4, 0x5, 0xbe, "b8661f08"}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x0, "0d4616e019e5"}, @selector_unit={0x6, 0x24, 0x5, 0x2, 0x3, 'e'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x6, 0x9, 0x7, "655375d3"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x4, 0x3, 0xf}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xb8, 0x4, 0x8, 0x2}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x81, 0x3, 0x5, 0x1, "cf"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0xc, 0x6, {0x7, 0x25, 0x1, 0xc, 0x7a, 0x101}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x4, 0x4, 0x8, 'N'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x0, 0x1, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xf, 0x400, 0x0, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x68, 0xff, 0x20, {0x7, 0x25, 0x1, 0x4, 0xb4, 0x7a9d}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x5, 0x3, 0x5, 0x20, 0x3}, 0x33, &(0x7f0000000280)={0x5, 0xf, 0x33, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x1, 0xf0f, 0x19, [0xc030, 0xff3e48, 0xc000, 0x47e35457c95de317, 0x82eb28b482bc1a0d, 0x1e]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x4, 0x13}]}, 0x5, [{0x5a, &(0x7f00000002c0)=@string={0x5a, 0x3, "1687ba907dcf811dd9a43a91f774cc78b812c5ca238092f5033c98674a06be6ad7909684bb63a0342a1c215e9f5daa4aae77be5c5d23a71e1d9745026771c0ccdaecee2d982afe8c690f2864f9eff65004f9aaa55c674589"}}, {0xb1, &(0x7f0000000340)=@string={0xb1, 0x3, "b6f97a47666b2a37760202c9f72200e7996316490d7af48fbe681c5cce7042f4f26c3550a2889452b57a38aacb785170138f026acf31d3e8ccb7e3d0a0173dbe45e2363863436cd3d4741ad6be87e54f738f4c158f50c9471cbcbe51d96b76cad602424efb70101ac7f11d0869c0f85ee5ca3ebb0f7420286302f0da6728ee0e47808ff3cbdd28e4228c5064206ea7374810c39080b65edbd14e83eedeed857661859c0dd7637c65221b4e41be7350"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x41a}}]}) syz_usb_control_io$uac1(r2, &(0x7f00000005c0)={0x14, &(0x7f0000000540)={0x20, 0x6, 0x3a, {0x3a, 0x23, "dd5c706baf4a6cbb7d857335c4508c574eed0da6303b460cfcc06578643328aeae701f19e1c3e1238055c120f9c607017262a3b45aa6640d"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000600)={0x20, 0x14, 0xed, "2b57b36c263551c9b9c9181bc329d2f77875eb0eb58c63af3cffde0ca22f6ef21527dacfa8b9755c71fa7e1bcb7ccd3cf11e9d893ae71fb3ce49c9e93df6ac27c24b76db8e3335d2f762a68b354d29c4b49cb81b4f910be5f1febc8b783abc76e75bc0d70f0967e8181cccdb742b9cf6cad61fa91fa5d7d9923cdad0a695d9842bbcb6f044e0129dd769381ab47a195e6f0f43581578c325c7d7b9fe4075e46f2e20366201f19e4ae349664ce2e12339c5602a5e78d8b8ef82840b7834e6d40f3007f16b9d3c0d3125c1dfe1619e0610ece610917dee88834f482267a6b662437a98656d8eb990e136a19c535f"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000780)={0x20, 0x81, 0x1, 'K'}, &(0x7f00000007c0)={0x20, 0x82, 0x1, "f0"}, &(0x7f0000000800)={0x20, 0x83, 0x2, '/['}, &(0x7f0000000840)={0x20, 0x84, 0x2, '6P'}, &(0x7f0000000880)={0x20, 0x85, 0x3, "83e09c"}}) syz_usb_connect$cdc_ncm(0x5, 0xa2, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x2, 0x1, 0x0, 0x110, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "10403362"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xfffffffd, 0x4, 0x80, 0x8}, {0x6, 0x24, 0x1a, 0x40}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0xd, 0x1, 0x4}, @mdlm={0x15, 0x24, 0x12, 0xd1}, @country_functional={0xa, 0x24, 0x7, 0x9, 0xe3, [0x3, 0x6cb3]}, @obex={0x5, 0x24, 0x15, 0x793}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0x40, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0xf7, 0x3a}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x1, 0x9, 0x5, 0x2, 0x8, 0xfc}, 0x2e, &(0x7f0000000a40)={0x5, 0xf, 0x2e, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0xa0, 0x0, 0x3, 0x1, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x0, 0x1, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x55, "1c95e2fc7e339339726b045b6786343f"}]}, 0x3, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x500a}}]}) r3 = msgget(0x0, 0x54) msgsnd(r3, &(0x7f0000000b80)={0x1, "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"}, 0x1008, 0x0) write(r1, &(0x7f0000001bc0)="cc13db4ad44f48673bc425b2f50e053f1b0233fd3dd45f90d2a03052e7434ba530a226dd55156c53acc81ac35bf885841babfff8f8e30db0c37d19f839f68a128b41bbf0f210714a48327c357740addac92c3550dd1c6953572a9bd99cf838d3b120ac425cd9b8d71432bf23", 0x6c) syz_create_resource$binfmt(&(0x7f0000001c40)='./file0\x00') msgctl$IPC_STAT(r3, 0x2, &(0x7f0000001c80)=""/180) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000001d40)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = syz_open_dev$ublk_chdev(&(0x7f0000002080), 0x0, 0x600) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000001d80)={0x0, 0x5e32, 0x200, 0x3, 0x287, 0x0, r1}, &(0x7f0000001e00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x294d, 0x4000, 0x2, 0x16a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x295c, 0x8000, 0x3, 0x262, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8ca8, 0x0, 0x0, 0x1d9, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7393, 0x80000, 0x3, 0x2bd, 0x0, r1}}], 0x4, &(0x7f00000030c0)={0x2e, 0x2, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x5}, 0x0, r7, '\x00', {0x3, 0x59d, 0x0, &(0x7f00000020c0)=@buf_1k="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"}}, &(0x7f0000003140)) msgctl$IPC_RMID(r3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000042c0)={0x4, 0x4, &(0x7f0000003180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7}, [@alu={0x7, 0x0, 0xd, 0x2, 0x2, 0xffffffffffffffde, 0x10}]}, &(0x7f00000031c0)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000003200)=""/4096, 0x41100, 0x8, '\x00', 0x0, @fallback=0x37, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0xa, 0x0, &(0x7f0000004200)=[{0x3, 0x2, 0x7, 0x4}, {0x3, 0x2, 0x1, 0xc}, {0x5, 0x3, 0x7, 0x5}, {0x5, 0x5, 0x3}, {0x0, 0x3, 0x10, 0x3}, {0x3, 0x3, 0xc}, {0x1, 0x3, 0x5, 0x9}, {0x0, 0x1, 0x4, 0x6}, {0x1, 0x4, 0xb, 0x9}, {0x5, 0x3, 0xe, 0x1}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004580)={r8, 0x0, 0xf, 0x4b, &(0x7f0000004380)="1b9d573a420ac8296b16d8751d94db", &(0x7f00000043c0)=""/75, 0x3, 0x0, 0xe3, 0x37, &(0x7f0000004440)="ecbcab84bc4092a81dbd144e80e90fd4001b3f90a6ec425b952bb9bf86028b4a274476214289e663aa167f7164e4958a044d9cfedeacdad564d4af2d4642ac76d434bb937f01aca76e3f4eca65e1589d24c1c243ec47001dc66f5e0b716f99889613f393d3422d327779d260114388eb3b8bb76ae8f3e78ad499599f66f1cf90744009f9f9e1b55124fe33c15c20fbf1a7d83c93881c85b8a3731fb4dd5cc765e56a7702199353015395fb0e41c5c13d064adc5ce8a093bcf8342e7a4a4ed2170225559d909b5074c04cb3db5f5fd8fc98d4c08b2268ccefadd448a138a539255f03d1", &(0x7f0000004540)="e9f111dfd526f197904b0bbf56a8cd9060ce1dbd89b05b49af733254209fdad231c2f24ad828032deadfd038117f5a988c27016e99d897", 0x4, 0x0, 0x5}, 0x50) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000004780)={0x0, 0x1, 0x0, &(0x7f0000004600)=[{}], 0x1, 0x0, &(0x7f0000004680)=[{}], 0x1, 0x0, &(0x7f0000004700)=[{}], 0x1, 0x0, &(0x7f0000004740)=[{}]}) read$FUSE(r1, &(0x7f0000004800)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000008880)=0x0) r12 = fcntl$getown(r6, 0x9) msgctl$IPC_SET(r3, 0x1, &(0x7f00000088c0)={{0x0, r9, 0xee00, r10, 0xee01, 0xc, 0x9877}, 0x0, 0x0, 0xf, 0x8, 0x40, 0x7, 0x100, 0xfdb4, 0xfff9, 0x5, r11, r12}) ioctl$KDMKTONE(r5, 0x4b30, 0x3ff) sched_setscheduler(r11, 0x3, &(0x7f0000008940)=0x1ff) socket(0x1a, 0x2, 0x9) sendmsg$nl_xfrm(r1, &(0x7f0000008b80)={&(0x7f0000008980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000008b40)={&(0x7f00000089c0)=@delsa={0x158, 0x11, 0x794, 0x70bd2b, 0x25dfdbfc, {@in6=@private2, 0x4d6, 0xa, 0x32}, [@algo_aead={0x6e, 0x12, {{'aegis128-generic\x00'}, 0x110, 0x120, "bae4f67d3317f10c0b0532f1b4903e2ca9c9b11bef9dab63d501b3215b432b48ee16"}}, @srcaddr={0x14, 0xd, @in6=@mcast1}, @replay_val={0x10, 0xa, {0x70bd29, 0x70bd26, 0xffff}}, @algo_crypt={0x9b, 0x2, {{'ecb-serpent-avx\x00'}, 0x298, "d45d2583ed992055d563dd5462e17a4b644e25a16aaa715818e65edd900d599cd4917fc49ffafb41cae37e26830a5344e2c82a426af75c7f4809d2481a67ef560c04b06b13970ac84d3b4eb4dff80caba5f988"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20008000}, 0xd840) executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@remote, @private0={0xfc, 0x0, '\x00', 0xff}, @empty, 0x9, 0x40, 0x0, 0x100, 0x0, 0xd0010b}) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x331020, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025647a31000000000900010073797a3000000000080005400000001c"], 0xe0}, 0x1, 0x0, 0x0, 0x4081}, 0x0) (async) ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, &(0x7f0000000040)) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) (rerun: 64) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/config.gz\x00', 0x0, 0x0) read$eventfd(r5, &(0x7f00000002c0), 0x8) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000300)={[{@abort}, {@acl}, {@oldalloc}, {@jqfmt_vfsv0}]}, 0x1, 0x5cb, &(0x7f0000000600)="$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") ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r9) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r10, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}]}, 0x3c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYRESDEC=r8, @ANYRES16=r7], 0x1c}}, 0x840) (async) write$nci(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="7105"], 0x148) executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/681], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2000}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xeff, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b9", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 5: r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0x8, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000008000000000000000000000000211df385", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)=r3}, 0x20) close(0x3) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0x7, 0x80000, r2}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x40, 0x700, 0x8, 0xe, {{0x3b, 0x4, 0x1, 0x6, 0xec, 0x64, 0x0, 0x1, 0x4, 0x0, @multicast2, @private=0xa010100, {[@ssrr={0x89, 0x13, 0x6f, [@loopback, @multicast1, @empty, @remote]}, @timestamp_addr={0x44, 0x4c, 0xc6, 0x1, 0x1, [{@multicast2, 0x8}, {@rand_addr=0x64010101, 0x3ff}, {@local, 0x351}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@loopback, 0x800}, {@local, 0x2}, {@multicast2, 0x2}, {@multicast2, 0xf}, {@rand_addr=0x64010102, 0x4}]}, @end, @timestamp={0x44, 0xc, 0xfd, 0x0, 0xa, [0x5, 0x80]}, @ssrr={0x89, 0xb, 0xe6, [@local, @loopback]}, @cipso={0x86, 0x5e, 0x0, [{0x5, 0x7, "cb9335514d"}, {0x2, 0xf, "d27f80cc8fbd4379d0d8777ee9"}, {0x0, 0x12, "3d944e32bb85e318f24edcd7adcf3b99"}, {0x7, 0x9, "d8666ca42e37b6"}, {0x7, 0xb, "99ff39926e420567b8"}, {0x5, 0xb, "cf343a1def1b6902c5"}, {0x0, 0x11, "f43ca8ac9c3d2de0bacf8378405ae3"}]}]}}}}}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000004800)={0x2020}, 0x2020) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x12, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xd70}, [@exit, @generic={0x2, 0x1, 0x5, 0x0, 0x3}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xe}]}, &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x10, '\x00', r5, @fallback=0x2d, r6, 0x8, &(0x7f0000000400)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x9, &(0x7f0000000480)=[r2, 0x1, r4, r2, r4, r4, r4, r4], &(0x7f00000005c0)=[{0x3, 0x5, 0x1, 0xb}, {0x2, 0x2, 0x1, 0x4}, {0x5, 0x3, 0xc, 0x2}, {0x1, 0x1, 0xe, 0x8}, {0x3, 0x4, 0xb, 0xc}, {0x1, 0x3, 0xe, 0x3}, {0x1, 0x4, 0x10}, {0x5, 0x3, 0x0, 0xc}, {0x2, 0x8000001, 0x7, 0x9}], 0x10, 0x200}, 0x94) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r8, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r9, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000100)=@nullb, r4, &(0x7f0000000280)={0x6, 0x6, 0x1}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$eJzs3T9rZFUUAPDzZiaTFy0miI0i+EALq7DR0iZRVhBSCWNjY3BnQWaGhSwMuKJxq/0CWi6Cn8LWztpvIGgp2GWLyJP3L5PnzoTHhiQSfr8mN/fec+959w6T6p18/sZ8eu9BEo9Pfo80TaK3F3vxLInt6EXjuzgJAOD2eJbn8XceERvV70nnyEHv6rICAK5S9fe/ctO5AADX48+f3vtm/+Dg7idZlsZroyeLcRIR8yeLcTW+fz++jFlM4k6M4jQiP1O1P/r44G4MssJ2vD0/XowXrfX3/4qtMn43RrG9On43q9Tx44ji50a8FFns399olhrFq6vj310RH+NhvPPWufx3YhS/fREPYhb3oohdxn+7m2Uf5j+cfP1ZsU0Rn/RivFnOq21F5P1ruxQAAAAAAAAAAAAAAAAAAAAAAG69nSxLqvI9Zf2eoquuv9M/Lcd3ssZ2uz5PFX9WL7iqD5RHXaLnOI+nTX2dO1mW5fXEZfwgXh/E4GaeGgAAAAAAAAAAAAAAAAAAAP5fHn71aHo4m02OXrwxf1otNT2cNdUAmtf6X3TlvUkvmp4349H0sL9+wc3ue52vNlDkeuHkGAziMsfSuRG/bBX5rJnzY51v3dPvfqqby8v9tA5vLuaSOaetj80rH5xlmNVzmkOeHibVXutzTpuhn88PDaNzPknS6invdjY5ysuDOs3bd5q2DnM5NFy3xfdJ+cHucizF1QxfXjn0T57n3R7n/T+qO6p7krLERrfb2agbKx+waKTP3/uv6xdc+5XRv9QXDgAAAAAAAAAAAAAAAAAAsFb7xen/eHxhaO/KkgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAa7b8//9NI42Ids9zjeM6+KI5dWMYRw/bO27dxGMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwy/0bAAD///9/QUk=") io_setup(0x6, 0x0) pipe2(&(0x7f0000000180), 0x80000) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x20, '\x00', 0x0, @cgroup_skb}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)="2a3a206782", 0x5) add_key(0x0, 0x0, &(0x7f0000000780), 0x0, 0xfffffffffffffffa) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000880), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) executing program 5: mbind(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x8, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000fff000/0x1000)=nil) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) brk(0x20ffc004) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class bisect: the chunk can be dropped bisect: split chunks (needed=true): <8> bisect: split chunk #0 of len 8 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 22, 29, 8, 30] detailed listing: executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/681], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2000}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xeff, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b9", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 5: r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0x8, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000008000000000000000000000000211df385", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)=r3}, 0x20) close(0x3) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0x7, 0x80000, r2}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x40, 0x700, 0x8, 0xe, {{0x3b, 0x4, 0x1, 0x6, 0xec, 0x64, 0x0, 0x1, 0x4, 0x0, @multicast2, @private=0xa010100, {[@ssrr={0x89, 0x13, 0x6f, [@loopback, @multicast1, @empty, @remote]}, @timestamp_addr={0x44, 0x4c, 0xc6, 0x1, 0x1, [{@multicast2, 0x8}, {@rand_addr=0x64010101, 0x3ff}, {@local, 0x351}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@loopback, 0x800}, {@local, 0x2}, {@multicast2, 0x2}, {@multicast2, 0xf}, {@rand_addr=0x64010102, 0x4}]}, @end, @timestamp={0x44, 0xc, 0xfd, 0x0, 0xa, [0x5, 0x80]}, @ssrr={0x89, 0xb, 0xe6, [@local, @loopback]}, @cipso={0x86, 0x5e, 0x0, [{0x5, 0x7, "cb9335514d"}, {0x2, 0xf, "d27f80cc8fbd4379d0d8777ee9"}, {0x0, 0x12, "3d944e32bb85e318f24edcd7adcf3b99"}, {0x7, 0x9, "d8666ca42e37b6"}, {0x7, 0xb, "99ff39926e420567b8"}, {0x5, 0xb, "cf343a1def1b6902c5"}, {0x0, 0x11, "f43ca8ac9c3d2de0bacf8378405ae3"}]}]}}}}}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000004800)={0x2020}, 0x2020) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x12, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xd70}, [@exit, @generic={0x2, 0x1, 0x5, 0x0, 0x3}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xe}]}, &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x10, '\x00', r5, @fallback=0x2d, r6, 0x8, &(0x7f0000000400)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x9, &(0x7f0000000480)=[r2, 0x1, r4, r2, r4, r4, r4, r4], &(0x7f00000005c0)=[{0x3, 0x5, 0x1, 0xb}, {0x2, 0x2, 0x1, 0x4}, {0x5, 0x3, 0xc, 0x2}, {0x1, 0x1, 0xe, 0x8}, {0x3, 0x4, 0xb, 0xc}, {0x1, 0x3, 0xe, 0x3}, {0x1, 0x4, 0x10}, {0x5, 0x3, 0x0, 0xc}, {0x2, 0x8000001, 0x7, 0x9}], 0x10, 0x200}, 0x94) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r8, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r9, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000100)=@nullb, r4, &(0x7f0000000280)={0x6, 0x6, 0x1}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") io_setup(0x6, 0x0) pipe2(&(0x7f0000000180), 0x80000) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x20, '\x00', 0x0, @cgroup_skb}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)="2a3a206782", 0x5) add_key(0x0, 0x0, &(0x7f0000000780), 0x0, 0xfffffffffffffffa) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000880), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) executing program 5: mbind(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x8, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000fff000/0x1000)=nil) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) brk(0x20ffc004) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <4> bisect: split chunk #0 of len 4 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 8, 30] detailed listing: executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000100)=@nullb, r4, &(0x7f0000000280)={0x6, 0x6, 0x1}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") io_setup(0x6, 0x0) pipe2(&(0x7f0000000180), 0x80000) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x20, '\x00', 0x0, @cgroup_skb}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)="2a3a206782", 0x5) add_key(0x0, 0x0, &(0x7f0000000780), 0x0, 0xfffffffffffffffa) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000880), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) executing program 5: mbind(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x8, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000fff000/0x1000)=nil) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) brk(0x20ffc004) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 30] detailed listing: executing program 5: mbind(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x8, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000fff000/0x1000)=nil) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) brk(0x20ffc004) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 30] detailed listing: executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000100)=@nullb, r4, &(0x7f0000000280)={0x6, 0x6, 0x1}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") io_setup(0x6, 0x0) pipe2(&(0x7f0000000180), 0x80000) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x20, '\x00', 0x0, @cgroup_skb}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)="2a3a206782", 0x5) add_key(0x0, 0x0, &(0x7f0000000780), 0x0, 0xfffffffffffffffa) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000880), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class bisect: the chunk can be dropped bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 2 programs left: executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000100)=@nullb, r4, &(0x7f0000000280)={0x6, 0x6, 0x1}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$eJzs3T9rZFUUAPDzZiaTFy0miI0i+EALq7DR0iZRVhBSCWNjY3BnQWaGhSwMuKJxq/0CWi6Cn8LWztpvIGgp2GWLyJP3L5PnzoTHhiQSfr8mN/fec+959w6T6p18/sZ8eu9BEo9Pfo80TaK3F3vxLInt6EXjuzgJAOD2eJbn8XceERvV70nnyEHv6rICAK5S9fe/ctO5AADX48+f3vtm/+Dg7idZlsZroyeLcRIR8yeLcTW+fz++jFlM4k6M4jQiP1O1P/r44G4MssJ2vD0/XowXrfX3/4qtMn43RrG9On43q9Tx44ji50a8FFns399olhrFq6vj310RH+NhvPPWufx3YhS/fREPYhb3oohdxn+7m2Uf5j+cfP1ZsU0Rn/RivFnOq21F5P1ruxQAAAAAAAAAAAAAAAAAAAAAAG69nSxLqvI9Zf2eoquuv9M/Lcd3ssZ2uz5PFX9WL7iqD5RHXaLnOI+nTX2dO1mW5fXEZfwgXh/E4GaeGgAAAAAAAAAAAAAAAAAAAP5fHn71aHo4m02OXrwxf1otNT2cNdUAmtf6X3TlvUkvmp4349H0sL9+wc3ue52vNlDkeuHkGAziMsfSuRG/bBX5rJnzY51v3dPvfqqby8v9tA5vLuaSOaetj80rH5xlmNVzmkOeHibVXutzTpuhn88PDaNzPknS6invdjY5ysuDOs3bd5q2DnM5NFy3xfdJ+cHucizF1QxfXjn0T57n3R7n/T+qO6p7krLERrfb2agbKx+waKTP3/uv6xdc+5XRv9QXDgAAAAAAAAAAAAAAAAAAsFb7xen/eHxhaO/KkgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAa7b8//9NI42Ids9zjeM6+KI5dWMYRw/bO27dxGMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwy/0bAAD///9/QUk=") io_setup(0x6, 0x0) pipe2(&(0x7f0000000180), 0x80000) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x20, '\x00', 0x0, @cgroup_skb}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)="2a3a206782", 0x5) add_key(0x0, 0x0, &(0x7f0000000780), 0x0, 0xfffffffffffffffa) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000880), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) bisect: trying to concatenate bisect: concatenate 2 entries minimizing program #0 before concatenation testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [28, 30] detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000100)=@nullb, r4, &(0x7f0000000280)={0x6, 0x6, 0x1}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") io_setup(0x6, 0x0) pipe2(&(0x7f0000000180), 0x80000) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x20, '\x00', 0x0, @cgroup_skb}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)="2a3a206782", 0x5) add_key(0x0, 0x0, &(0x7f0000000780), 0x0, 0xfffffffffffffffa) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 30] detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000100)=@nullb, r4, &(0x7f0000000280)={0x6, 0x6, 0x1}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") io_setup(0x6, 0x0) pipe2(&(0x7f0000000180), 0x80000) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x20, '\x00', 0x0, @cgroup_skb}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)="2a3a206782", 0x5) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 30] detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000100)=@nullb, r4, &(0x7f0000000280)={0x6, 0x6, 0x1}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") io_setup(0x6, 0x0) pipe2(&(0x7f0000000180), 0x80000) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x20, '\x00', 0x0, @cgroup_skb}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 30] detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000100)=@nullb, r4, &(0x7f0000000280)={0x6, 0x6, 0x1}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") io_setup(0x6, 0x0) pipe2(&(0x7f0000000180), 0x80000) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x20, '\x00', 0x0, @cgroup_skb}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340)="2a3a206782", 0x5) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 30] detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000100)=@nullb, r4, &(0x7f0000000280)={0x6, 0x6, 0x1}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") io_setup(0x6, 0x0) pipe2(&(0x7f0000000180), 0x80000) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x20, '\x00', 0x0, @cgroup_skb}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)="2a3a206782", 0x5) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 30] detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000100)=@nullb, r4, &(0x7f0000000280)={0x6, 0x6, 0x1}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") io_setup(0x6, 0x0) pipe2(&(0x7f0000000180), 0x80000) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x20, '\x00', 0x0, @cgroup_skb}, 0x94) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)="2a3a206782", 0x5) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 30] detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000100)=@nullb, r4, &(0x7f0000000280)={0x6, 0x6, 0x1}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") io_setup(0x6, 0x0) pipe2(&(0x7f0000000180), 0x80000) io_submit(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)="2a3a206782", 0x5) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 30] detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000100)=@nullb, r4, &(0x7f0000000280)={0x6, 0x6, 0x1}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") io_setup(0x6, 0x0) pipe2(&(0x7f0000000180), 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)="2a3a206782", 0x5) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 30] detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$eJzs3c1rHOUfAPDvbF76+vs1hVLUgwR6sFK7aRJfKgitR9FiQe91SbahZNMt2U1pYqHtwYJ4kSKIWBD/AO8eizcv+lcUtFCkBD14icxmtt1ks9kk3bqp8/nAtM8zz2yeeeaZ59nv7MyyAeTWaPpPIeLFiPgyiTjUUjYYWeHo6nbLj65PpUsSKysf/ZFEkq1rbp9k/x/IMi9ExE+fRZwotNdbW1yaLVUq5fksP1afuzJWW1w6eWmuNFOeKV+emJw8/cbkxNtvvdmztr56/q9vPrz33ukvji1//cODw3eSOBsHs7LWdjyFm62Z0RjNjslQnF234XgPKttNku1tPvys9oPtGcjG+VCkc8ChGMhGPfDfdyMiVoCcSox/yKlmHNC8tu/RdfBz4+G7qxdA7e0fXP1sJPY2ro32LydrrozS692RHtSf1vHj73fvpEt0+RziRg/qA2i6eSsiTg0Ots9/STb/7dypxofHm1tfR97ef6Cf7qXxz2sbxT+Fx/FPbBD/HNhg7O5E9/FfeNCDajpK4793Nox/H09dIwNZ7n+NmG8ouXipUj4VEf+PiOMxtCfNb3Y/5/Ty/ZVOZa3xX7qk9TdjwWw/HgzuWfua6VK99DRtbvXwVsRLT+LfJNrm/72NWHd9/6fH43ya+OXzrnUcLd99uVNZ9/a36n0EvPJ9xCsb9v+TO1rJ5vcnxxrnw1jzrGj35+2jv3aqf3vt7720//dv3v6RpPV+bW37dXy39+9yp7Kdnv/DyceNdPNG4rVSvT4/HjGcfNC+fuLJa5v55vZp+48f23z+2+j83xcRn2yx/beP3O646W7o/+lt9f/2E/ff//TbTvVvrf9fb6SOZ2u2Mv9tdQef5tgBAAAAAADAblOIiIORFIqP04VCsbj6fMeR2F+oVGv1ExerC5eno/Fd2ZEYKjTvdB9qeR5iPHsetpmfWJefjIjDEfHVwL5GvjhVrUz3u/EAAAAAAAAAAAAAAAAAAACwSxzo8P3/1G8D/d474Jnzk9+QX13Hfy9+6QnYlbz/Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj/kl/EPAAAAAAAAAAAAAAAAAAAAAAAAAAAAPXX+3Ll0WVl+dH0qzU9fXVyYrV49OV2uzRbnFqaKU9X5K8WZanWmUi5OVee6/b1KtXplfCIWro3Vy7X6WG1x6cJcdeFy/cKludJM+UJ56F9pFQAAAAAAAAAAAAAAAAAAADxfaotLs6VKpTzfj8TPhYj+1b7lxJnYFbux40TSrZfPZCfD2qLhtjVrEpElBp/VzicR0e9Dl+NEnycmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjxTwAAAP///b4wHA==") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000100)=@nullb, r4, &(0x7f0000000280)={0x6, 0x6, 0x1}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$eJzs3T9rZFUUAPDzZiaTFy0miI0i+EALq7DR0iZRVhBSCWNjY3BnQWaGhSwMuKJxq/0CWi6Cn8LWztpvIGgp2GWLyJP3L5PnzoTHhiQSfr8mN/fec+959w6T6p18/sZ8eu9BEo9Pfo80TaK3F3vxLInt6EXjuzgJAOD2eJbn8XceERvV70nnyEHv6rICAK5S9fe/ctO5AADX48+f3vtm/+Dg7idZlsZroyeLcRIR8yeLcTW+fz++jFlM4k6M4jQiP1O1P/r44G4MssJ2vD0/XowXrfX3/4qtMn43RrG9On43q9Tx44ji50a8FFns399olhrFq6vj310RH+NhvPPWufx3YhS/fREPYhb3oohdxn+7m2Uf5j+cfP1ZsU0Rn/RivFnOq21F5P1ruxQAAAAAAAAAAAAAAAAAAAAAAG69nSxLqvI9Zf2eoquuv9M/Lcd3ssZ2uz5PFX9WL7iqD5RHXaLnOI+nTX2dO1mW5fXEZfwgXh/E4GaeGgAAAAAAAAAAAAAAAAAAAP5fHn71aHo4m02OXrwxf1otNT2cNdUAmtf6X3TlvUkvmp4349H0sL9+wc3ue52vNlDkeuHkGAziMsfSuRG/bBX5rJnzY51v3dPvfqqby8v9tA5vLuaSOaetj80rH5xlmNVzmkOeHibVXutzTpuhn88PDaNzPknS6invdjY5ysuDOs3bd5q2DnM5NFy3xfdJ+cHucizF1QxfXjn0T57n3R7n/T+qO6p7krLERrfb2agbKx+waKTP3/uv6xdc+5XRv9QXDgAAAAAAAAAAAAAAAAAAsFb7xen/eHxhaO/KkgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAa7b8//9NI42Ids9zjeM6+KI5dWMYRw/bO27dxGMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwy/0bAAD///9/QUk=") io_setup(0x6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)="2a3a206782", 0x5) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 30] detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$eJzs3c1rHOUfAPDvbF76+vs1hVLUgwR6sFK7aRJfKgitR9FiQe91SbahZNMt2U1pYqHtwYJ4kSKIWBD/AO8eizcv+lcUtFCkBD14icxmtt1ks9kk3bqp8/nAtM8zz2yeeeaZ59nv7MyyAeTWaPpPIeLFiPgyiTjUUjYYWeHo6nbLj65PpUsSKysf/ZFEkq1rbp9k/x/IMi9ExE+fRZwotNdbW1yaLVUq5fksP1afuzJWW1w6eWmuNFOeKV+emJw8/cbkxNtvvdmztr56/q9vPrz33ukvji1//cODw3eSOBsHs7LWdjyFm62Z0RjNjslQnF234XgPKttNku1tPvys9oPtGcjG+VCkc8ChGMhGPfDfdyMiVoCcSox/yKlmHNC8tu/RdfBz4+G7qxdA7e0fXP1sJPY2ro32LydrrozS692RHtSf1vHj73fvpEt0+RziRg/qA2i6eSsiTg0Ots9/STb/7dypxofHm1tfR97ef6Cf7qXxz2sbxT+Fx/FPbBD/HNhg7O5E9/FfeNCDajpK4793Nox/H09dIwNZ7n+NmG8ouXipUj4VEf+PiOMxtCfNb3Y/5/Ty/ZVOZa3xX7qk9TdjwWw/HgzuWfua6VK99DRtbvXwVsRLT+LfJNrm/72NWHd9/6fH43ya+OXzrnUcLd99uVNZ9/a36n0EvPJ9xCsb9v+TO1rJ5vcnxxrnw1jzrGj35+2jv3aqf3vt7720//dv3v6RpPV+bW37dXy39+9yp7Kdnv/DyceNdPNG4rVSvT4/HjGcfNC+fuLJa5v55vZp+48f23z+2+j83xcRn2yx/beP3O646W7o/+lt9f/2E/ff//TbTvVvrf9fb6SOZ2u2Mv9tdQef5tgBAAAAAADAblOIiIORFIqP04VCsbj6fMeR2F+oVGv1ExerC5eno/Fd2ZEYKjTvdB9qeR5iPHsetpmfWJefjIjDEfHVwL5GvjhVrUz3u/EAAAAAAAAAAAAAAAAAAACwSxzo8P3/1G8D/d474Jnzk9+QX13Hfy9+6QnYlbz/Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj/kl/EPAAAAAAAAAAAAAAAAAAAAAAAAAAAAPXX+3Ll0WVl+dH0qzU9fXVyYrV49OV2uzRbnFqaKU9X5K8WZanWmUi5OVee6/b1KtXplfCIWro3Vy7X6WG1x6cJcdeFy/cKludJM+UJ56F9pFQAAAAAAAAAAAAAAAAAAADxfaotLs6VKpTzfj8TPhYj+1b7lxJnYFbux40TSrZfPZCfD2qLhtjVrEpElBp/VzicR0e9Dl+NEnycmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjxTwAAAP///b4wHA==") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000100)=@nullb, r4, &(0x7f0000000280)={0x6, 0x6, 0x1}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$eJzs3T9rZFUUAPDzZiaTFy0miI0i+EALq7DR0iZRVhBSCWNjY3BnQWaGhSwMuKJxq/0CWi6Cn8LWztpvIGgp2GWLyJP3L5PnzoTHhiQSfr8mN/fec+959w6T6p18/sZ8eu9BEo9Pfo80TaK3F3vxLInt6EXjuzgJAOD2eJbn8XceERvV70nnyEHv6rICAK5S9fe/ctO5AADX48+f3vtm/+Dg7idZlsZroyeLcRIR8yeLcTW+fz++jFlM4k6M4jQiP1O1P/r44G4MssJ2vD0/XowXrfX3/4qtMn43RrG9On43q9Tx44ji50a8FFns399olhrFq6vj310RH+NhvPPWufx3YhS/fREPYhb3oohdxn+7m2Uf5j+cfP1ZsU0Rn/RivFnOq21F5P1ruxQAAAAAAAAAAAAAAAAAAAAAAG69nSxLqvI9Zf2eoquuv9M/Lcd3ssZ2uz5PFX9WL7iqD5RHXaLnOI+nTX2dO1mW5fXEZfwgXh/E4GaeGgAAAAAAAAAAAAAAAAAAAP5fHn71aHo4m02OXrwxf1otNT2cNdUAmtf6X3TlvUkvmp4349H0sL9+wc3ue52vNlDkeuHkGAziMsfSuRG/bBX5rJnzY51v3dPvfqqby8v9tA5vLuaSOaetj80rH5xlmNVzmkOeHibVXutzTpuhn88PDaNzPknS6invdjY5ysuDOs3bd5q2DnM5NFy3xfdJ+cHucizF1QxfXjn0T57n3R7n/T+qO6p7krLERrfb2agbKx+waKTP3/uv6xdc+5XRv9QXDgAAAAAAAAAAAAAAAAAAsFb7xen/eHxhaO/KkgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAa7b8//9NI42Ids9zjeM6+KI5dWMYRw/bO27dxGMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwy/0bAAD///9/QUk=") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)="2a3a206782", 0x5) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 30] detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000100)=@nullb, r4, &(0x7f0000000280)={0x6, 0x6, 0x1}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)="2a3a206782", 0x5) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 30] detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000100)=@nullb, r4, &(0x7f0000000280)={0x6, 0x6, 0x1}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)="2a3a206782", 0x5) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 30] detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000100)=@nullb, r4, &(0x7f0000000280)={0x6, 0x6, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)="2a3a206782", 0x5) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 30] detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)="2a3a206782", 0x5) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 30] detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)="2a3a206782", 0x5) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 30] detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)="2a3a206782", 0x5) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 30] detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)="2a3a206782", 0x5) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 30] detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)="2a3a206782", 0x5) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 30] detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)="2a3a206782", 0x5) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 30] detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$eJzs3c1rHOUfAPDvbF76+vs1hVLUgwR6sFK7aRJfKgitR9FiQe91SbahZNMt2U1pYqHtwYJ4kSKIWBD/AO8eizcv+lcUtFCkBD14icxmtt1ks9kk3bqp8/nAtM8zz2yeeeaZ59nv7MyyAeTWaPpPIeLFiPgyiTjUUjYYWeHo6nbLj65PpUsSKysf/ZFEkq1rbp9k/x/IMi9ExE+fRZwotNdbW1yaLVUq5fksP1afuzJWW1w6eWmuNFOeKV+emJw8/cbkxNtvvdmztr56/q9vPrz33ukvji1//cODw3eSOBsHs7LWdjyFm62Z0RjNjslQnF234XgPKttNku1tPvys9oPtGcjG+VCkc8ChGMhGPfDfdyMiVoCcSox/yKlmHNC8tu/RdfBz4+G7qxdA7e0fXP1sJPY2ro32LydrrozS692RHtSf1vHj73fvpEt0+RziRg/qA2i6eSsiTg0Ots9/STb/7dypxofHm1tfR97ef6Cf7qXxz2sbxT+Fx/FPbBD/HNhg7O5E9/FfeNCDajpK4793Nox/H09dIwNZ7n+NmG8ouXipUj4VEf+PiOMxtCfNb3Y/5/Ty/ZVOZa3xX7qk9TdjwWw/HgzuWfua6VK99DRtbvXwVsRLT+LfJNrm/72NWHd9/6fH43ya+OXzrnUcLd99uVNZ9/a36n0EvPJ9xCsb9v+TO1rJ5vcnxxrnw1jzrGj35+2jv3aqf3vt7720//dv3v6RpPV+bW37dXy39+9yp7Kdnv/DyceNdPNG4rVSvT4/HjGcfNC+fuLJa5v55vZp+48f23z+2+j83xcRn2yx/beP3O646W7o/+lt9f/2E/ff//TbTvVvrf9fb6SOZ2u2Mv9tdQef5tgBAAAAAADAblOIiIORFIqP04VCsbj6fMeR2F+oVGv1ExerC5eno/Fd2ZEYKjTvdB9qeR5iPHsetpmfWJefjIjDEfHVwL5GvjhVrUz3u/EAAAAAAAAAAAAAAAAAAACwSxzo8P3/1G8D/d474Jnzk9+QX13Hfy9+6QnYlbz/Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj/kl/EPAAAAAAAAAAAAAAAAAAAAAAAAAAAAPXX+3Ll0WVl+dH0qzU9fXVyYrV49OV2uzRbnFqaKU9X5K8WZanWmUi5OVee6/b1KtXplfCIWro3Vy7X6WG1x6cJcdeFy/cKludJM+UJ56F9pFQAAAAAAAAAAAAAAAAAAADxfaotLs6VKpTzfj8TPhYj+1b7lxJnYFbux40TSrZfPZCfD2qLhtjVrEpElBp/VzicR0e9Dl+NEnycmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjxTwAAAP///b4wHA==") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)="2a3a206782", 0x5) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 30] detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)="2a3a206782", 0x5) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 30] detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)="2a3a206782", 0x5) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 30] detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)="2a3a206782", 0x5) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 30] detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)="2a3a206782", 0x5) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 30] detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x53) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)="2a3a206782", 0x5) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 30] detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)="2a3a206782", 0x5) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 30] detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 30] detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$eJzs3c1rHOUfAPDvbF76+vs1hVLUgwR6sFK7aRJfKgitR9FiQe91SbahZNMt2U1pYqHtwYJ4kSKIWBD/AO8eizcv+lcUtFCkBD14icxmtt1ks9kk3bqp8/nAtM8zz2yeeeaZ59nv7MyyAeTWaPpPIeLFiPgyiTjUUjYYWeHo6nbLj65PpUsSKysf/ZFEkq1rbp9k/x/IMi9ExE+fRZwotNdbW1yaLVUq5fksP1afuzJWW1w6eWmuNFOeKV+emJw8/cbkxNtvvdmztr56/q9vPrz33ukvji1//cODw3eSOBsHs7LWdjyFm62Z0RjNjslQnF234XgPKttNku1tPvys9oPtGcjG+VCkc8ChGMhGPfDfdyMiVoCcSox/yKlmHNC8tu/RdfBz4+G7qxdA7e0fXP1sJPY2ro32LydrrozS692RHtSf1vHj73fvpEt0+RziRg/qA2i6eSsiTg0Ots9/STb/7dypxofHm1tfR97ef6Cf7qXxz2sbxT+Fx/FPbBD/HNhg7O5E9/FfeNCDajpK4793Nox/H09dIwNZ7n+NmG8ouXipUj4VEf+PiOMxtCfNb3Y/5/Ty/ZVOZa3xX7qk9TdjwWw/HgzuWfua6VK99DRtbvXwVsRLT+LfJNrm/72NWHd9/6fH43ya+OXzrnUcLd99uVNZ9/a36n0EvPJ9xCsb9v+TO1rJ5vcnxxrnw1jzrGj35+2jv3aqf3vt7720//dv3v6RpPV+bW37dXy39+9yp7Kdnv/DyceNdPNG4rVSvT4/HjGcfNC+fuLJa5v55vZp+48f23z+2+j83xcRn2yx/beP3O646W7o/+lt9f/2E/ff//TbTvVvrf9fb6SOZ2u2Mv9tdQef5tgBAAAAAADAblOIiIORFIqP04VCsbj6fMeR2F+oVGv1ExerC5eno/Fd2ZEYKjTvdB9qeR5iPHsetpmfWJefjIjDEfHVwL5GvjhVrUz3u/EAAAAAAAAAAAAAAAAAAACwSxzo8P3/1G8D/d474Jnzk9+QX13Hfy9+6QnYlbz/Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj/kl/EPAAAAAAAAAAAAAAAAAAAAAAAAAAAAPXX+3Ll0WVl+dH0qzU9fXVyYrV49OV2uzRbnFqaKU9X5K8WZanWmUi5OVee6/b1KtXplfCIWro3Vy7X6WG1x6cJcdeFy/cKludJM+UJ56F9pFQAAAAAAAAAAAAAAAAAAADxfaotLs6VKpTzfj8TPhYj+1b7lxJnYFbux40TSrZfPZCfD2qLhtjVrEpElBp/VzicR0e9Dl+NEnycmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjxTwAAAP///b4wHA==") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 30] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) socket$nl_route(0x10, 0x3, 0x0) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class minimized 29 calls -> 4 calls minimizing program #1 before concatenation testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 29] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1, r10, 0x803e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="27030200590214120600602fb96d84f706e10500000086ddffff1144ee3654d4b8bf4a31accb", 0x26}], 0x1}, 0x20005884) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 28] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 27] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) socketpair(0x27, 0x4, 0x7a3af6ad, &(0x7f00000003c0)) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 26] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 25] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 25] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 25] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 24] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 24] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 24] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, 0x0, &(0x7f00000000c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd26, 0x25dfdc01, {0x2, 0x10, 0xf5, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r8, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 23] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r7, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 22] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r7, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 21] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 20] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 19] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) socket$kcm(0x11, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 18] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0x14, 0x32, 0x728, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 17] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 16] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 15] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 14] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 13] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 12] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 11] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 10] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 9] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 8] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 7] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x3, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 6] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$inet6_sctp(0xa, 0x3, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 5] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4] detailed listing: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class minimized 30 calls -> 4 calls testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class bisect: concatenation succeeded found reproducer with 8 syscalls minimizing guilty program testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-write-mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340)="2a3a206782", 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat-write-mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-write-mkdirat-mount-openat-write detailed listing: executing program 0: mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r1, 0x0, 0x0) program did not crash testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000600), 0x0) program did not crash extracting C reproducer testing compiled C program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class simplifying C reproducer testing compiled C program (duration=45s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing compiled C program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class testing program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class validation run: crashed=true testing program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class validation run: crashed=true testing program (duration=45s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="2a3a206782", 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) program crashed: KASAN: null-ptr-deref Read in trace_event_raw_event_rtrs_clt_conn_class validation run: crashed=true reproducing took 2h0m42.80384892s repro crashed as (corrupted=false): rtrs_client L2098: : Failed to resolve address, err: -ENODEV rtrs_client L2641: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] ================================================================== BUG: KASAN: null-ptr-deref in do_trace_event_raw_event_rtrs_clt_conn_class drivers/infiniband/ulp/rtrs/rtrs-clt-trace.h:58 [inline] BUG: KASAN: null-ptr-deref in trace_event_raw_event_rtrs_clt_conn_class+0x220/0x480 drivers/infiniband/ulp/rtrs/rtrs-clt-trace.h:36 Read of size 255 at addr 0000000000000000 by task syz.0.17/4921 CPU: 0 UID: 0 PID: 4921 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 Call trace: show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:499 (C) __dump_stack+0x30/0x40 lib/dump_stack.c:94 dump_stack_lvl+0xd8/0x12c lib/dump_stack.c:120 print_report+0x58/0x84 mm/kasan/report.c:485 kasan_report+0x8c/0xc4 mm/kasan/report.c:595 check_region_inline mm/kasan/generic.c:-1 [inline] kasan_check_range+0x17c/0x1ac mm/kasan/generic.c:200 __asan_memcpy+0x3c/0x84 mm/kasan/shadow.c:105 do_trace_event_raw_event_rtrs_clt_conn_class drivers/infiniband/ulp/rtrs/rtrs-clt-trace.h:58 [inline] trace_event_raw_event_rtrs_clt_conn_class+0x220/0x480 drivers/infiniband/ulp/rtrs/rtrs-clt-trace.h:36 __traceiter_rtrs_clt_close_conns+0x74/0xc8 drivers/infiniband/ulp/rtrs/rtrs-clt-trace.h:77 __do_trace_rtrs_clt_close_conns drivers/infiniband/ulp/rtrs/rtrs-clt-trace.h:77 [inline] trace_rtrs_clt_close_conns drivers/infiniband/ulp/rtrs/rtrs-clt-trace.h:77 [inline] rtrs_clt_close_conns+0x2f0/0x40c drivers/infiniband/ulp/rtrs/rtrs-clt.c:1949 rtrs_clt_open+0xa6c/0xd54 drivers/infiniband/ulp/rtrs/rtrs-clt.c:2858 find_and_get_or_create_sess drivers/block/rnbd/rnbd-clt.c:1268 [inline] rnbd_clt_map_device+0xcb8/0x1f64 drivers/block/rnbd/rnbd-clt.c:1551 rnbd_clt_map_device_store+0x900/0xad8 drivers/block/rnbd/rnbd-clt-sysfs.c:612 dev_attr_store+0x6c/0x90 drivers/base/core.c:2505 sysfs_kf_write+0xe0/0x108 fs/sysfs/file.c:145 kernfs_fop_write_iter+0x260/0x3b8 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x51c/0xa0c fs/read_write.c:687 ksys_write+0x12c/0x228 fs/read_write.c:739 __do_sys_write fs/read_write.c:750 [inline] __se_sys_write fs/read_write.c:747 [inline] __arm64_sys_write+0x84/0x98 fs/read_write.c:747 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x19c/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:758 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:777 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:590 ================================================================== final repro crashed as (corrupted=false): rtrs_client L2098: : Failed to resolve address, err: -ENODEV rtrs_client L2641: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] ================================================================== BUG: KASAN: null-ptr-deref in do_trace_event_raw_event_rtrs_clt_conn_class drivers/infiniband/ulp/rtrs/rtrs-clt-trace.h:58 [inline] BUG: KASAN: null-ptr-deref in trace_event_raw_event_rtrs_clt_conn_class+0x220/0x480 drivers/infiniband/ulp/rtrs/rtrs-clt-trace.h:36 Read of size 255 at addr 0000000000000000 by task syz.0.17/4921 CPU: 0 UID: 0 PID: 4921 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 Call trace: show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:499 (C) __dump_stack+0x30/0x40 lib/dump_stack.c:94 dump_stack_lvl+0xd8/0x12c lib/dump_stack.c:120 print_report+0x58/0x84 mm/kasan/report.c:485 kasan_report+0x8c/0xc4 mm/kasan/report.c:595 check_region_inline mm/kasan/generic.c:-1 [inline] kasan_check_range+0x17c/0x1ac mm/kasan/generic.c:200 __asan_memcpy+0x3c/0x84 mm/kasan/shadow.c:105 do_trace_event_raw_event_rtrs_clt_conn_class drivers/infiniband/ulp/rtrs/rtrs-clt-trace.h:58 [inline] trace_event_raw_event_rtrs_clt_conn_class+0x220/0x480 drivers/infiniband/ulp/rtrs/rtrs-clt-trace.h:36 __traceiter_rtrs_clt_close_conns+0x74/0xc8 drivers/infiniband/ulp/rtrs/rtrs-clt-trace.h:77 __do_trace_rtrs_clt_close_conns drivers/infiniband/ulp/rtrs/rtrs-clt-trace.h:77 [inline] trace_rtrs_clt_close_conns drivers/infiniband/ulp/rtrs/rtrs-clt-trace.h:77 [inline] rtrs_clt_close_conns+0x2f0/0x40c drivers/infiniband/ulp/rtrs/rtrs-clt.c:1949 rtrs_clt_open+0xa6c/0xd54 drivers/infiniband/ulp/rtrs/rtrs-clt.c:2858 find_and_get_or_create_sess drivers/block/rnbd/rnbd-clt.c:1268 [inline] rnbd_clt_map_device+0xcb8/0x1f64 drivers/block/rnbd/rnbd-clt.c:1551 rnbd_clt_map_device_store+0x900/0xad8 drivers/block/rnbd/rnbd-clt-sysfs.c:612 dev_attr_store+0x6c/0x90 drivers/base/core.c:2505 sysfs_kf_write+0xe0/0x108 fs/sysfs/file.c:145 kernfs_fop_write_iter+0x260/0x3b8 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x51c/0xa0c fs/read_write.c:687 ksys_write+0x12c/0x228 fs/read_write.c:739 __do_sys_write fs/read_write.c:750 [inline] __se_sys_write fs/read_write.c:747 [inline] __arm64_sys_write+0x84/0x98 fs/read_write.c:747 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x19c/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:758 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:777 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:590 ==================================================================